VYPR
← All advisories
Medium severity6.8OSV Advisory· Published Jan 8, 2026· Updated Jun 17, 2026

CVE-2026-21694

CVE-2026-21694

Description

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Kromitgmbh/TitraOSV2 versions
    0.1.0, 0.10.0, 0.11.0, …+ 1 more
    • (no CPE)range: 0.1.0, 0.10.0, 0.11.0, …
    • (no CPE)range: <=0.99.49
  • Kromit/Titra
    cpe:2.3:a:kromit:titra:*:*:*:*:*:*:*:*
    Range: <0.99.50

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.