VYPR

QueryWeaver

by FalkorDB

CVEs (1)

  • CVE-2026-10130HigJul 18, 2026
    risk 0.46cvss 8.2epss 0.01

    QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a signup request with a known victim email address. The signup route unconditionally creates and links a new token…