https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T16:45:23.106843+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-79660 CVE-2026-79660 — Ech0 before 4.7.3 Email Disclosure via Public API 2026-09-29T16:45:23.123940+00:00

Affected: lin-snow Ech0

Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without authentication.