https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 09:18:01 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-82271 <p>R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users&#39; conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users&#39; conversation histories, corrupting state and injecting malicious content.</p> <p>R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users&#39; conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users&#39; conversation histories, corrupting state and injecting malicious content.</p> https://db.gcve.eu/vuln/fkie_cve-2026-82271 https://db.gcve.eu/vuln/ghsa-w8h6-f7c2-3rhj <p>R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users&#39; conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users&#39; conversation histories, corrupting state and injecting malicious content.</p> <p>R2R through 3.6.5 fails to properly validate user ownership in conversation update and message handlers, allowing authenticated users to modify other users&#39; conversations. Attackers can supply arbitrary conversation identifiers to rename conversations and append messages to other users&#39; conversation histories, corrupting state and injecting malicious content.</p> https://db.gcve.eu/vuln/ghsa-w8h6-f7c2-3rhj