Security: givanz/Vvveb
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Vvveb digital asset authorization bypass allows Vendors to list, read, edit, or delete other Vendors' digital assetsGHSA-chpc-xj4m-9g3j published
May 28, 2026 by givanzHigh -
Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' productsGHSA-cjhq-xqq3-6xv8 published
May 28, 2026 by givanzHigh -
Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' productsGHSA-cj37-c5m2-3jmc published
May 28, 2026 by givanzHigh -
Vvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisionsGHSA-gmrp-ccwf-xggq published
May 28, 2026 by givanzHigh -
Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisionsGHSA-88w5-4x93-48rf published
May 28, 2026 by givanzHigh -
Vvveb comment authorization bypass allows Authors to read, approve, edit, or delete comments under other Authors' postsGHSA-26pw-fgm8-2hcf published
May 28, 2026 by givanzHigh -
Vvveb post authorization bypass allows Authors to view, duplicate, or delete other Authors' postsGHSA-xxx7-8f3v-g9p6 published
May 28, 2026 by givanzHigh -
Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' productsGHSA-j5jv-wvpg-gfh9 published
May 28, 2026 by givanzHigh -
Vvveb admin/auth-token IDOR allows unauthorized disclosure of administrator REST API tokensGHSA-5g3g-x6mf-pwr6 published
May 13, 2026 by givanzHigh -
Vvveb checkout IDOR allows unauthorized reuse of another user's cartGHSA-rmh2-wv73-xpqh published
May 13, 2026 by givanzHigh
Learn more about advisories related to givanz/Vvveb in the GitHub Advisory Database