Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:32:29 +0000 CVE-2026-79660 — Ech0 before 4.7.3 Email Disclosure via Public API https://vulnerability.circl.lu/vuln/cve-2026-79660 <p><strong>Affected:</strong> lin-snow Ech0</p> <p>Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without authentication.</p> <p><strong>Affected:</strong> lin-snow Ech0</p> <p>Ech0 versions before 4.7.3 expose guest commenter email addresses through public API endpoints due to improper JSON serialization tags on the Comment model. Unauthenticated attackers can harvest all commenter emails by calling the /api/comments and /api/comments/public endpoints without authentication.</p> https://vulnerability.circl.lu/vuln/cve-2026-79660