https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:53:44 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336104 EUVD-2026-336104 https://cve.radiocsirt.org/vuln/euvd-2026-336104 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55880 <p>OpenReplay is a self-hosted session replay suite. In 1.27.0 and earlier, three dashboard and note mutation functions ran their SQL without the ownership predicate that their sibling read and edit functions use: notes.delete filtered only on note id and project id, while dashboards.update_widget and dashboards.remove_widget filtered only on dashboard id and widget id, allowing any authenticated member to delete another user&#39;s private session notes and remove or rewrite widgets on another user&#39;s private dashboards.</p> <p>OpenReplay is a self-hosted session replay suite. In 1.27.0 and earlier, three dashboard and note mutation functions ran their SQL without the ownership predicate that their sibling read and edit functions use: notes.delete filtered only on note id and project id, while dashboards.update_widget and dashboards.remove_widget filtered only on dashboard id and widget id, allowing any authenticated member to delete another user&#39;s private session notes and remove or rewrite widgets on another user&#39;s private dashboards.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-55880