https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:30:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-385159 EUVD-2026-385159 https://cve.radiocsirt.org/vuln/euvd-2026-385159 https://cve.radiocsirt.org/vuln/fkie_cve-2026-108111 <p>ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users&#39; private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.</p> <p>ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users&#39; private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-108111 https://cve.radiocsirt.org/vuln/ghsa-rxv9-x3r4-pp2r <p>ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users&#39; private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.</p> <p>ruoyi-ai 3.0.0 through 3.1.0 contains a missing authorization vulnerability in the GET /workflow/search endpoint that exposes other users&#39; private workflows. Authenticated non-admin users can query this endpoint, which lacks owner or is_public filtering, to list enabled private workflows in the same tenant, including UUIDs and full node and edge configurations.</p> https://cve.radiocsirt.org/vuln/ghsa-rxv9-x3r4-pp2r