https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:29:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-267571 EUVD-2026-267571 https://cve.radiocsirt.org/vuln/euvd-2026-267571 https://cve.radiocsirt.org/vuln/fkie_cve-2025-70963 <p>Gophish &lt;=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the page on every login. This makes permanent API credentials accessible to any script running in the browser context.</p> <p>Gophish &lt;=0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the page on every login. This makes permanent API credentials accessible to any script running in the browser context.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-70963 https://cve.radiocsirt.org/vuln/ghsa-9f8m-9547-2gqm <p><strong>Affected:</strong> Go: github.com/gophish/gophish</p> <p>Gophish &lt;= 0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the page on every login. This makes permanent API credentials accessible to any script running in the browser context.</p> <p><strong>Affected:</strong> Go: github.com/gophish/gophish</p> <p>Gophish &lt;= 0.12.1 is vulnerable to Incorrect Access Control. The administrative dashboard exposes each user’s long-lived API key directly inside the rendered HTML/JavaScript of the page on every login. This makes permanent API credentials accessible to any script running in the browser context.</p> https://cve.radiocsirt.org/vuln/ghsa-9f8m-9547-2gqm