Vulnerabilities in David-Crty
6 resultsCVE-2026-108963HIGHdatabasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can bEPSS 1.7%CVE-2026-121939CRITICALDatabasement before 1.10.9 Account Takeover via OIDC Email Auto-LinkingEPSS 0.5%CVE-2026-95654CRITICALDatabasement before 1.7.14 Authorization Bypass via Stale Invitation TokenEPSS 0.5%CVE-2026-103533LOWDavid-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversalEPSS 0.3%CVE-2026-103534MEDIUMDavid-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access controlEPSS 0.3%CVE-2026-111875MEDIUMDavid-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorizationEPSS 0.2%