https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 23:46:11 +0000 https://vulnerability.circl.lu/vuln/cve-2026-92764 <p><strong>Affected:</strong> opencve</p> <p>OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations API endpoint to the token&#39;s organization, instead returning the token creator&#39;s memberships. Attackers with organization-scoped tokens can list and retrieve every organization their creator belongs to, bypassing intended token isolation boundaries.</p> <p><strong>Affected:</strong> opencve</p> <p>OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations API endpoint to the token&#39;s organization, instead returning the token creator&#39;s memberships. Attackers with organization-scoped tokens can list and retrieve every organization their creator belongs to, bypassing intended token isolation boundaries.</p> https://vulnerability.circl.lu/vuln/cve-2026-92764