https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T02:59:25.785686+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-105040 fkie_cve-2026-105040 2026-10-17T02:59:25.811573+00:00

The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and take over that account.

 https://db.gcve.eu/vuln/gcve-1337-2026-00000000000000011111111111111111111000000000000000000011111101001111111110000000000000000000011111111111111111111000000000000010100 GCVE-1337-2026-00000000000000011111111111111111111000000000000000000011111101001111111110000000000000000000011111111111111111111000000000000010100 — EnergizeLab Eilik User-ID Mass Assignment Account Takeover 2026-10-17T02:59:25.811633+00:00

Affected: EnergizeLab NestJS auth service

The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and take over that account.

 https://db.gcve.eu/vuln/ghsa-49rf-m9q2-2xm2 GHSA-49rf-m9q2-2xm2 2026-10-17T02:59:25.811666+00:00

The EnergizeLab Eilik NestJS auth service accepts a user-controlled user ID in account update requests (mass assignment). A registered user can set another account's identifier and take over that account.