https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T23:09:32.220737+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-92783 fkie_cve-2026-92783 2026-09-30T23:09:32.239619+00:00

Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with read access to delete access control relationships. Attackers can revoke the owner's grant and permanently lock legitimate owners out of objects.

 https://db.gcve.eu/vuln/ghsa-w297-93hv-q3cx GHSA-w297-93hv-q3cx 2026-09-30T23:09:32.239698+00:00

Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/rbac/{id} endpoint, allowing users with read access to delete access control relationships. Attackers can revoke the owner's grant and permanently lock legitimate owners out of objects.