VYPR

sequencing-server

by NASA AMMOS

CVEs (1)

  • CVE-2026-71214Aug 5, 2026
    risk 0.00cvss epss 0.00

    The Aerie/PlanDev sequencing-server's authorization middleware (sequencing-server/src/app.ts) derives the caller's Hasura session role via getHasuraSession(), which prefers a session_variables object taken directly from the client-supplied JSON request body over the…