Vulnerabilities in lin-snow

3 results

CVE-2026-33638MEDIUMEch0 authenticated user-list exposed data via public `/api/allusers` endpointEPSS 0.5%CVE-2026-35036HIGHEch0 Affected by Unauthenticated Server-Side Request Forgery in Website Preview FeatureEPSS 0.3%CVE-2026-35037HIGHEch0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadataEPSS 0.3%