VYPR

ezBookkeeping

by EzBookkeeping

CVEs (1)

  • CVE-2026-86041MedNov 4, 2026
    risk 0.27cvss —epss —

    ezBookkeeping is an open source, self-hosted personal finance application. From 0.10.0 until 1.6.0, ezBookkeeping constructs its Gin router with gin.New() without configuring SetTrustedProxies, causing c.ClientIP() to trust a spoofed X-Forwarded-For value. An unauthenticated…