https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T02:40:38.190454+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-109141 fkie_cve-2026-109141 2026-11-05T02:40:38.192058+00:00

The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every request that is not tied to a CA, including the bulk import endpoint POST /api/v1/bulk/cas/import. It adds a new child CA under any existing CA, gives the child any of that CA's resources, and creates the ROAs given in the request

 https://db.gcve.eu/vuln/ghsa-9rcf-27j4-vxg2 GHSA-9rcf-27j4-vxg2 2026-11-05T02:40:38.192160+00:00

The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every request that is not tied to a CA, including the bulk import endpoint POST /api/v1/bulk/cas/import. It adds a new child CA under any existing CA, gives the child any of that CA's resources, and creates the ROAs given in the request