https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T22:14:26.800101+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-36102 fkie_cve-2026-36102 2026-10-11T22:14:26.880051+00:00

An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate privileges to superadmin via the role parameter to the /api/v1/invite endpoint.

 https://vulnerability.circl.lu/vuln/ghsa-3x65-v85x-f94h GHSA-3x65-v85x-f94h 2026-10-11T22:14:26.880137+00:00

An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate privileges to superadmin via the role parameter to the /api/v1/invite endpoint.