VYPR

midday

by Midday AI

CVEs (1)

  • CVE-2026-81035HigAug 26, 2026
    risk 0.53cvss 8.1epss

    Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, and the data-layer…