https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 01 Nov 2026 08:52:41 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119644 <p>Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users&#39; pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victims&#39; images and stored files or change their star status.</p> <p>Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users&#39; pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victims&#39; images and stored files or change their star status.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119644 https://db.gcve.eu/vuln/ghsa-24rj-35xh-8w8p <p>Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users&#39; pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victims&#39; images and stored files or change their star status.</p> <p>Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users&#39; pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victims&#39; images and stored files or change their star status.</p> https://db.gcve.eu/vuln/ghsa-24rj-35xh-8w8p