Flagforgectf - vulnerabilities (CVEs)

8 CVEs in 1 products, 0 in the last 30 days, newest from 2026-01-08.

Products

• Flagforge - 8 CVEs

Newest CVEs of Flagforgectf

• CVE-2026-21868 - CVSS 7.5 (high), 2026-01-08: Flag Forge is a Capture The Flag (CTF) platform. Versions 2.3.2 and below have a Regular Expression Denial of Service (ReDoS) vulnerability in the user…
• CVE-2025-61777 - CVSS 9.4 (critical), 2025-10-06: Flag Forge is a Capture The Flag (CTF) platform. Starting in version 2.0.0 and prior to version 2.3.2, the `/api/admin/badge-templates` (GET) and…
• CVE-2025-59932 - CVSS 8.6 (high), 2025-09-27: Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests…
• CVE-2025-59843 - CVSS 6.9 (medium), 2025-09-26: Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/[username] returns user email addresses in…
• CVE-2025-59841 - CVSS 9.8 (critical), 2025-09-25: Flag Forge is a Capture The Flag (CTF) platform. In versions from 2.2.0 to before 2.3.1, the FlagForge web application improperly handles session…
• CVE-2025-59833 - CVSS 7.5 (high), 2025-09-24: Flag Forge is a Capture The Flag (CTF) platform. In versions from 2.1.0 to before 2.3.0, the API endpoint GET /api/problems/:id returns challenge hints in…
• CVE-2025-59827 - CVSS 9.8 (critical), 2025-09-24: Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, the /api/admin/assign-badge endpoint lacks proper access control, allowing any…
• CVE-2025-59826 - CVSS 7.6 (high), 2025-09-23: Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious,…