https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T15:59:23.426327+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-73039 fkie_cve-2026-73039 2026-09-28T15:59:23.430113+00:00

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing history, and manipulate other users' Continue Watching dashboards by supplying arbitrary primary keys without ownership verification.

 https://vulnerability.circl.lu/vuln/ghsa-pr4j-5x2h-5vr8 GHSA-pr4j-5x2h-5vr8 2026-09-28T15:59:23.430344+00:00

streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records. Attackers can enumerate all users' watch progress, delete arbitrary viewing history, and manipulate other users' Continue Watching dashboards by supplying arbitrary primary keys without ownership verification.