https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T08:19:46.430422+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-121562 fkie_cve-2026-121562 2026-11-05T08:19:46.450943+00:00

CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team custom field values. Unauthenticated attackers can paginate GET requests to collect hidden registration data such as emails, phone numbers, and student IDs when team mode and public visibility are enabled.

 https://db.gcve.eu/vuln/ghsa-qx4w-wvv4-8jv6 GHSA-qx4w-wvv4-8jv6 2026-11-05T08:19:46.451069+00:00

CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that exposes non-public team custom field values. Unauthenticated attackers can paginate GET requests to collect hidden registration data such as emails, phone numbers, and student IDs when team mode and public visibility are enabled.