Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 00:45:34 +0000 CVE-2026-30230 — Flare: Password‑Protected Thumbnail Bypass https://vulnerability.circl.lu/vuln/cve-2026-30230 <p><strong>Affected:</strong> FlintSH Flare</p> <p>Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the thumbnail endpoint does not validate the password for password‑protected files. It checks ownership/admin for private files but skips password verification, allowing thumbnail access without the password. This issue has been patched in version 1.7.2.</p> <p><strong>Affected:</strong> FlintSH Flare</p> <p>Flare is a Next.js-based, self-hostable file sharing platform that integrates with screenshot tools. Prior to version 1.7.2, the thumbnail endpoint does not validate the password for password‑protected files. It checks ownership/admin for private files but skips password verification, allowing thumbnail access without the password. This issue has been patched in version 1.7.2.</p> https://vulnerability.circl.lu/vuln/cve-2026-30230