Codewithcj - vulnerabilities (CVEs)

4 CVEs in 1 products, 3 in the last 30 days, newest from 2026-10-20.

Products

• Sparkyfitness - 2 CVEs

Newest CVEs of Codewithcj

• CVE-2026-113612 - CVSS 5.4 (medium), 2026-10-20: SparkyFitness before 0.17.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' food variants via the DELETE…
• CVE-2026-102923 - CVSS 5.4 (medium), 2026-10-16: SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and…
• CVE-2026-92263 - CVSS 7.2 (high), 2026-10-16: SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint interpolates an…
• CVE-2025-65368 - CVSS 6.1 (medium), 2026-01-15: SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output.