https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-28T22:53:23.001993+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-106677 fkie_cve-2026-106677 2026-10-28T22:53:23.020091+00:00

Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversations, read messages, send messages, and mark messages as read for arbitrary conversation ids because the service does not verify that the caller is a conversation participant.

 https://db.gcve.eu/vuln/ghsa-3m4r-974p-rpwj GHSA-3m4r-974p-rpwj 2026-10-28T22:53:23.020166+00:00

Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl. An authenticated user can view conversations, read messages, send messages, and mark messages as read for arbitrary conversation ids because the service does not verify that the caller is a conversation participant.