https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 18:40:19 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-125751 <p>Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller&#39;s tenant context. Authenticated users with settings:read permission can supply another tenant&#39;s API token ID to obtain its Argon2 secret hash and owning tenant ID.</p> <p>Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller&#39;s tenant context. Authenticated users with settings:read permission can supply another tenant&#39;s API token ID to obtain its Argon2 secret hash and owning tenant ID.</p> https://db.gcve.eu/vuln/fkie_cve-2026-125751 https://db.gcve.eu/vuln/ghsa-vpf7-rfxw-cm3m <p>Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller&#39;s tenant context. Authenticated users with settings:read permission can supply another tenant&#39;s API token ID to obtain its Argon2 secret hash and owning tenant ID.</p> <p>Meteroid before 2.2.0 contains an authorization bypass vulnerability in the ApiTokensService GetApiTokenById gRPC handler that fails to apply the caller&#39;s tenant context. Authenticated users with settings:read permission can supply another tenant&#39;s API token ID to obtain its Argon2 secret hash and owning tenant ID.</p> https://db.gcve.eu/vuln/ghsa-vpf7-rfxw-cm3m