F - vulnerabilities (CVEs)

7 CVEs in 2 products, 0 in the last 30 days, newest from 2026-04-03.

Products

CVE-2026-22662 - CVSS 5.3 (medium), 2026-04-03: prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to…
CVE-2026-22665 - CVSS 8.6 (high), 2026-04-03: prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of…
CVE-2026-22664 - CVSS 7.7 (high), 2026-04-03: prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated…
CVE-2026-22663 - CVSS 8.7 (high), 2026-04-03: prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page…
CVE-2026-22661 - CVSS 8.6 (high), 2026-04-03: prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the…
CVE-2026-28403 - CVSS 7.6 (high), 2026-03-02: Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:<httpPort+1>`) accepts connections…
CVE-2026-28412 - CVSS 7.5 (high), 2026-03-02: Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limit on concurrent connections. Combined…