https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T03:52:19.810998+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-112291 fkie_cve-2026-112291 2026-10-20T03:52:19.832261+00:00

Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. Remote attackers can send GET requests to /api/extension-manager-tasks to read task output revealing filesystem paths, installed extensions, versions, and PHP version.

 https://db.gcve.eu/vuln/ghsa-6p4m-p9g8-5x3c GHSA-6p4m-p9g8-5x3c 2026-10-20T03:52:19.832426+00:00

Flarum Extension Manager 2.0.0-beta.1 before 2.0.0-beta.8 lacks authentication and admin checks on the TaskResource index endpoint, allowing unauthenticated information disclosure. Remote attackers can send GET requests to /api/extension-manager-tasks to read task output revealing filesystem paths, installed extensions, versions, and PHP version.