https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 18:34:21 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-86113 <p>BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough function that allows authenticated users to modify other users&#39; reading records. Attackers can exploit sequential ReadThrough IDs to overwrite arbitrary users&#39; start dates, finish dates, progress, and progress mode, affecting reading statistics and exported data.</p> <p>BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough function that allows authenticated users to modify other users&#39; reading records. Attackers can exploit sequential ReadThrough IDs to overwrite arbitrary users&#39; start dates, finish dates, progress, and progress mode, affecting reading statistics and exported data.</p> https://db.gcve.eu/vuln/fkie_cve-2026-86113 https://db.gcve.eu/vuln/ghsa-4p9p-pq58-9cvp <p>BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough function that allows authenticated users to modify other users&#39; reading records. Attackers can exploit sequential ReadThrough IDs to overwrite arbitrary users&#39; start dates, finish dates, progress, and progress mode, affecting reading statistics and exported data.</p> <p>BookWyrm through 0.9.1 contains an authorization bypass vulnerability in the edit_readthrough function that allows authenticated users to modify other users&#39; reading records. Attackers can exploit sequential ReadThrough IDs to overwrite arbitrary users&#39; start dates, finish dates, progress, and progress mode, affecting reading statistics and exported data.</p> https://db.gcve.eu/vuln/ghsa-4p9p-pq58-9cvp