VYPR

SuggestArr

by SuggestArr

CVEs (1)

  • CVE-2026-113703CriOct 20, 2026
    risk 0.60cvss 9.3epss —

    SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in api_service/auth/middleware.py trusts the client-controlled request.remote_addr value, which is derived from the spoofable…