VYPR

trailbase

by Trailbaseio

CVEs (1)

  • CVE-2026-119759Nov 9, 2026
    risk 0.00cvss —epss —

    TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated attackers to manipulate the object-store id metadata within std.FileUpload columns without ownership validation during insert and update operations. Attackers can…