https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-04T13:10:30.406748+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-121729 CVE-2026-121729 — emailflare before commit cf31f33 Missing Authorization via /api/keys Routes 2026-11-04T13:10:30.408225+00:00

Affected: 0xdps emailflare

emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to send mail from any domain, or revoke existing keys to disable integrations.