https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-20T12:37:12.731025+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111722 CVE-2026-111722 — LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API 2026-10-20T12:37:12.743697+00:00

Affected: LingGuoAI LingGuo-Drama

LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check. Self-registered attackers can iterate numeric IDs via GET, PUT and DELETE /admin/v1/projects/:id to read, overwrite, reassign or delete any user's short-drama projects.