VYPR

killbill

by Killbill

CVEs (1)

  • CVE-2026-85213HigSep 3, 2026
    risk 0.49cvss 7.6epss

    Kill Bill through 0.24.21 fails to enforce permission annotations on several AdminResource endpoints including getQueueEntries, invalidatesCache, and putOutOfRotation. Authenticated users with minimal account:read permissions can read internal queues, flush server caches, and…