VYPR

Laci Synchroni

by Lacisynchroni

CVEs (1)

  • CVE-2026-54047CriSep 11, 2026
    risk 0.53cvss epss

    Laci Synchroni is a decentralized mod and appearance sync server and plugin for Dalamud. Versions of the backend prior to 1.2.3 have an improper authentication vulnerability in the application's OAuth2 login flow. The application relies on client-side state by trusting the `UID`…