https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T13:19:51.936836+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-82290 fkie_cve-2026-82290 2026-09-28T13:19:52.157019+00:00

Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.

 https://vulnerability.circl.lu/vuln/ghsa-4hhp-mjp7-37r2 GHSA-4hhp-mjp7-37r2 2026-09-28T13:19:52.157194+00:00

Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.