https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 17:15:10 +0000 https://db.gcve.eu/vuln/cve-2026-113596 <p><strong>Affected:</strong> webstudio-is webstudio</p> <p>Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users&#39; project data via the publishedBuilds and findManyByIds tRPC procedures. Attackers who know another user&#39;s project UUID can query the /trpc handler to retrieve publish history, titles, domains, preview images, and latest builds.</p> <p><strong>Affected:</strong> webstudio-is webstudio</p> <p>Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users&#39; project data via the publishedBuilds and findManyByIds tRPC procedures. Attackers who know another user&#39;s project UUID can query the /trpc handler to retrieve publish history, titles, domains, preview images, and latest builds.</p> https://db.gcve.eu/vuln/cve-2026-113596