https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 21:47:53 +0000 https://db.gcve.eu/vuln/cve-2026-116018 <p><strong>Affected:</strong> ONEARMY community-platform</p> <p>ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users&#39; notifications as read via POST /api/notifications/:id/read. Attackers can iterate sequential notification IDs to suppress unread indicators of users in the same tenant, causing them to miss replies, comments and new-content notices.</p> <p><strong>Affected:</strong> ONEARMY community-platform</p> <p>ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users&#39; notifications as read via POST /api/notifications/:id/read. Attackers can iterate sequential notification IDs to suppress unread indicators of users in the same tenant, causing them to miss replies, comments and new-content notices.</p> https://db.gcve.eu/vuln/cve-2026-116018