https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:32:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-338889 EUVD-2026-338889 https://cve.radiocsirt.org/vuln/euvd-2026-338889 https://cve.radiocsirt.org/vuln/fkie_cve-2026-46485 <p>Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow unauthenticated users or non-admin authenticated users to write changes to the main config.yaml through the config-saving functionality despite configured permissions, allowing unauthorized modification of dashboard configuration and potential service disruption. This issue is fixed in version 4.0.8.</p> <p>Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow unauthenticated users or non-admin authenticated users to write changes to the main config.yaml through the config-saving functionality despite configured permissions, allowing unauthorized modification of dashboard configuration and potential service disruption. This issue is fixed in version 4.0.8.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-46485