https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 21:25:14 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-111350 <p>Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams&#39; viewer groups and share links. Attackers who know a victim team&#39;s data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.</p> <p>Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams&#39; viewer groups and share links. Attackers who know a victim team&#39;s data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.</p> https://db.gcve.eu/vuln/fkie_cve-2026-111350 https://db.gcve.eu/vuln/ghsa-xxc7-55p3-gxvw <p>Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams&#39; viewer groups and share links. Attackers who know a victim team&#39;s data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.</p> <p>Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams&#39; viewer groups and share links. Attackers who know a victim team&#39;s data room and group identifiers can send DELETE requests, read group links, or rewrite group document permissions across teams.</p> https://db.gcve.eu/vuln/ghsa-xxc7-55p3-gxvw