Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 05:28:29 +0000 CVE-2025-65112 — PubNet Critical Authentication Bypass Allows Unauthenticated Package Upload and Identity Spoofing https://cve.radiocsirt.org/vuln/cve-2025-65112 <p><strong>Affected:</strong> ricardoboss PubNet</p> <p>PubNet is a self-hosted Dart &amp; Flutter package service. Prior to version 1.1.3, the /api/storage/upload endpoint in PubNet allows unauthenticated users to upload packages as any user by providing arbitrary author-id values. This enables identity spoofing, privilege escalation, and supply chain attacks. This issue has been patched in version 1.1.3.</p> <p><strong>Affected:</strong> ricardoboss PubNet</p> <p>PubNet is a self-hosted Dart &amp; Flutter package service. Prior to version 1.1.3, the /api/storage/upload endpoint in PubNet allows unauthenticated users to upload packages as any user by providing arbitrary author-id values. This enables identity spoofing, privilege escalation, and supply chain attacks. This issue has been patched in version 1.1.3.</p> https://cve.radiocsirt.org/vuln/cve-2025-65112