https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 13:19:52 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-82290 <p>Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users&#39; feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.</p> <p>Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users&#39; feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-82290 https://vulnerability.circl.lu/vuln/ghsa-4hhp-mjp7-37r2 <p>Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users&#39; feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.</p> <p>Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users&#39; feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.</p> https://vulnerability.circl.lu/vuln/ghsa-4hhp-mjp7-37r2