CWE-639 Authorization Bypass Through User-Controlled Key

MCP TypeScript SDK: Experimental tasks were not tied to the session that created them

ApostropheCMS: Missing Authorization on Notification PATCH/DELETE Endpoints

ApostropheCMS: Same-parent page reorder in @apostrophecms/page move() re-ranks a restricted parent's children without create authorization

OpenRemote has Cross-Realm User Information Disclosure in UserResourceImpl

Contao: Improper access control in the preview links module

Vikunja: Any user can enumerate every team and its members by attaching arbitrary teams to a throwaway project

Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)

Duplicate Advisory: Vikunja: Cross-tenant task-position rows can be injected into arbitrary project views via the unvalidated project_view_id in the task position endpoint (v1 and v2)

Vikunja: Read-only project members can obtain any link share's access hash via the single-share read endpoint (v1 and v2) and escalate to the share's permission level

Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure

Duplicate Advisory: Vikunja: Link-share principal-type confusion enables cross-account team removal, bot takeover, and roster disclosure

Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)

Duplicate Advisory: Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)

Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints

Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers

Payload: Client uploads could overwrite S3 objects

Payload: Unauthorized update to collection documents

Payload: Field-level write access bypass in Payload on MongoDB

wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry

Payload: Polymorphic join queries could disclose hidden fields

vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features

vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on `/score` and `/rerank`

Apache Airflow environment-variable secrets backend permits cross-team credential use

Apache Airflow Yandex Lockbox backend allows cross-team secret disclosure

Trigger.dev: Cross-environment deployment cancel