https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T05:58:40.892629+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116806 fkie_cve-2026-116806 2026-10-29T05:58:40.923492+00:00

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allows non-admin organization members to create projects and mint write-type ingestion credentials, bypassing the admin-only policy. Attackers can repeatedly call the endpoint with a member session to obtain plaintext secrets, inject fake analytics events, poison business metrics, and consume the organization's usage budget.

 https://db.gcve.eu/vuln/ghsa-7qfj-9p8q-5fq8 GHSA-7qfj-9p8q-5fq8 2026-10-29T05:58:40.923573+00:00

OpenPanel before 3.0.0 contains a missing authorization vulnerability in the onboarding.project tRPC mutation that allows non-admin organization members to create projects and mint write-type ingestion credentials, bypassing the admin-only policy. Attackers can repeatedly call the endpoint with a member session to obtain plaintext secrets, inject fake analytics events, poison business metrics, and consume the organization's usage budget.