https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:56:29 +0000 https://cve.radiocsirt.org/vuln/cve-2026-56767 <p><strong>Affected:</strong> getmaxun maxun</p> <p>Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users&#39; robots and OAuth tokens. Attackers can read plaintext Google and Airtable access tokens, modify, delete, or execute other users&#39; robots by bypassing ownership checks in API endpoints.</p> <p><strong>Affected:</strong> getmaxun maxun</p> <p>Maxun before 0.0.42 contains a cross-tenant insecure direct object reference vulnerability in storage and webhook API handlers that allows authenticated users to access other users&#39; robots and OAuth tokens. Attackers can read plaintext Google and Airtable access tokens, modify, delete, or execute other users&#39; robots by bypassing ownership checks in API endpoints.</p> https://cve.radiocsirt.org/vuln/cve-2026-56767