VYPR

appointment-booking-software

by OpenReception

Source repositories

CVEs (22)

  • CVE-2026-48082LowAug 6, 2026
    risk 0.24cvss 3.7epss 0.00

    OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at `/api/tenants/{id}/appointments/bootstrap-challenge` issues a SHA-256 proof-of-work with `difficulty=4` hex…

  • CVE-2026-48074LowAug 6, 2026
    risk 0.18cvss 2.7epss 0.00

    OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform. Prior to version 1.0.6, when a TENANT_ADMIN deletes an existing staff user, the underlying `StaffService.deleteStaffMember()` runs an additional invite cleanup that…

Page 2 of 2