https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T20:01:57.691951+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-108710 fkie_cve-2026-108710 2026-10-11T20:01:58.387161+00:00

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Viewer-role users allowlisted for a database but denied read can submit search queries or node IDs to retrieve node IDs, labels and full property maps.

 https://vulnerability.circl.lu/vuln/ghsa-vqw4-fq22-hj9c GHSA-vqw4-fq22-hj9c 2026-10-11T20:01:58.387271+00:00

NornicDB through 1.4.1 contains a missing authorization vulnerability that allows authenticated users to bypass per-database read restrictions on the /nornicdb/search and /nornicdb/similar endpoints. Viewer-role users allowlisted for a database but denied read can submit search queries or node IDs to retrieve node IDs, labels and full property maps.