https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-22T07:27:56.600239+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-113596 fkie_cve-2026-113596 2026-10-22T07:27:56.618644+00:00

Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the publishedBuilds and findManyByIds tRPC procedures. Attackers who know another user's project UUID can query the /trpc handler to retrieve publish history, titles, domains, preview images, and latest builds.

 https://db.gcve.eu/vuln/ghsa-r95x-94xh-ccwh GHSA-r95x-94xh-ccwh 2026-10-22T07:27:56.618830+00:00

Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the publishedBuilds and findManyByIds tRPC procedures. Attackers who know another user's project UUID can query the /trpc handler to retrieve publish history, titles, domains, preview images, and latest builds.