MikeTrendsTrends right now

search

Alanaktion Phproject

Trends

  1. 1
    Phproject vulnerability lets API users bypass issue restrictions●CVE-2026-104991 is a missing-authorization flaw in Alanaktion Phproject. Authenticated API key holders can bypass restriMmastodonTechnologyCybersecurity11 d ago

    A missing-authorization vulnerability, CVE-2026-104991, has been disclosed in Alanaktion Phproject. Authenticated users with API keys can bypass restricted-issue controls to read issue contents, comments and email addresses, and post unauthorized comments. Versions 1.1.6 through 1.8.6 are affected. Security communities are sharing the advisory as administrators assess whether their deployments need patching.