https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 14:19:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-336926 EUVD-2026-336926 https://cve.radiocsirt.org/vuln/euvd-2026-336926 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56767 <p>Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users&#39; robots and OAuth tokens. Attackers can read plaintext Google and Airtable access tokens, modify, delete, or execute other users&#39; robots by bypassing ownership checks in API endpoints.</p> <p>Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users&#39; robots and OAuth tokens. Attackers can read plaintext Google and Airtable access tokens, modify, delete, or execute other users&#39; robots by bypassing ownership checks in API endpoints.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56767 https://cve.radiocsirt.org/vuln/ghsa-44p3-ph5c-h5h3 <p>Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users&#39; robots and OAuth tokens. Attackers can read plaintext Google and Airtable access tokens, modify, delete, or execute other users&#39; robots by bypassing ownership checks in API endpoints.</p> <p>Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users&#39; robots and OAuth tokens. Attackers can read plaintext Google and Airtable access tokens, modify, delete, or execute other users&#39; robots by bypassing ownership checks in API endpoints.</p> https://cve.radiocsirt.org/vuln/ghsa-44p3-ph5c-h5h3