[ Latest · 16,702 CVEs ]
Newly published CVEs.
Every CVE the NVD lists as published in the last 30 days, newest first. Rows marked green on the left are on the matters-most list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-28625 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with… | |
| CVE-2026-28640 | 5 Oct 2026 | CVSS 7.8 | Google AndroidIn checkCallerIsCertInstallerOrSelfInProfile of CredentialStorageActivity.java, there is a possible permission bypass due to improper input… | |
| CVE-2026-105638 | 5 Oct 2026 | CVSS 9.1 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane's magic-code email login uses a six-digit numeric OTP with approximately 20… | |
| CVE-2026-105639 | 5 Oct 2026 | CVSS 9.8 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane's signup flow creates a logged-in User row for any submitted email without an… | |
| CVE-2026-105640 | 5 Oct 2026 | CVSS 9.1 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane trusts email addresses returned by Gitea OAuth and by self-managed GitLab… | |
| CVE-2026-105641 | 5 Oct 2026 | CVSS 9.8 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the deployments/aio/community/ and deployments/cli/community/ manifests provide… | |
| CVE-2026-105642 | 5 Oct 2026 | CVSS 8.8 | Ghost: Remote Code Execution via Bookmark Card ImagesGhost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in… | Fix |
| CVE-2026-105643 | 5 Oct 2026 | CVSS 7.3 | Ghost: Stored XSS via Embed Card PreviewsGhost is a Node.js content management system. From version 6.34.0 until 6.67.0, embed cards in the Ghost editor could bypass protections against… | Fix |
| CVE-2026-105634 | 5 Oct 2026 | CVSS 8.1 | makeplane planePlane is an open-source project management tool. Prior to 1.3.0, the ProjectMemberViewSet.partial_update method allows any project member, including… | |
| CVE-2026-105635 | 5 Oct 2026 | CVSS 7.4 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, ProjectJoinEndpoint at GET /api/workspaces/{slug}/projects/{project_id}/join/{pk}/… | |
| CVE-2026-105636 | 5 Oct 2026 | CVSS 9.9 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the webhook delivery task in apps/api/plane/bgtasks/webhook_task.py calls… | |
| CVE-2026-105637 | 5 Oct 2026 | CVSS 9.6 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, ProjectBulkAssetEndpoint.post in apps/api/plane/app/views/asset/v2.py retrieves… | |
| CVE-2026-105326 | 5 Oct 2026 | CVSS 2.5 | Red Hat Hardened ImagesAn argument injection flaw was found in CUPS. When email notification is configured, the CUPS scheduler accepts printer subscription requests that… | |
| CVE-2026-105386 | 5 Oct 2026 | CVSS 7.3 | onetwothreeneth HospitalManagementSystemA vulnerability was identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this issue is… | |
| CVE-2026-105387 | 5 Oct 2026 | CVSS 7.3 | girishsaraf Online-Appointment-Booking-SystemA security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the… | |
| CVE-2026-104711 | 5 Oct 2026 | CVSS 9.8 | Apache Software Foundation Apache StrutsImproper neutralization of special elements used in an expression language statement ('Expression Language Injection') vulnerability in Apache… | Fix |
| CVE-2026-104712 | 5 Oct 2026 | CVSS 7.5 | Apache Software Foundation Apache StrutsAsymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bound to an arbitrary-precision decimal… | Fix |
| CVE-2026-104713 | 5 Oct 2026 | CVSS 6.5 | Apache Software Foundation Apache StrutsAllocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request body is read into memory without any… | Fix |
| CVE-2026-104714 | 5 Oct 2026 | CVSS 8.8 | Apache Software Foundation Apache StrutsConcurrent execution using shared resource with improper synchronization ('race condition') vulnerability in Apache Struts. Where a localized message… | Fix |
| CVE-2026-103085 | 5 Oct 2026 | CVSS 6.5 | WP User ManagerImproper Access Control vulnerability in WP User Manager WP User Manager wp-user-manager allows Privilege Abuse.This issue affects WP User Manager… | |
| CVE-2026-103086 | 5 Oct 2026 | CVSS 6.5 | Stiofan UsersWPMissing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue… | |
| CVE-2026-103334 | 5 Oct 2026 | CVSS 7.5 | Etoile Web Design Incorporated Five Star Restaurant ReservationsInsertion of Sensitive Information Into Sent Data vulnerability in Etoile Web Design Incorporated Five Star Restaurant Reservations… | |
| CVE-2026-103349 | 5 Oct 2026 | CVSS 7.2 | Rymera Web Co Product Feed PRO for WooCommerceDeserialization of Untrusted Data vulnerability in Rymera Web Co Product Feed PRO for WooCommerce woo-product-feed-pro allows Object Injection.This… | |
| CVE-2026-103352 | 5 Oct 2026 | CVSS 9.3 | WP BASE BookingImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking… | |
| CVE-2026-100509 | 5 Oct 2026 | CVSS 6.5 | Webful Creations RepairBuddyImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Webful Creations RepairBuddy… | |
| CVE-2026-100515 | 5 Oct 2026 | CVSS 7.1 | VillaTheme Photo Reviews for WooCommerceImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Photo Reviews for WooCommerce… | |
| CVE-2026-102383 | 5 Oct 2026 | CVSS 6.5 | VillaTheme LookzyMissing Authorization vulnerability in VillaTheme Lookzy woo-lookbook allows Exploiting Incorrectly Configured Access Control Security Levels.This… | |
| CVE-2026-93322 | 5 Oct 2026 | CVSS 6.9 | moby BuildKitA malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon. | |
| CVE-2026-93323 | 5 Oct 2026 | CVSS 6.8 | moby BuildKitThe Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing… | |
| CVE-2026-93318 | 5 Oct 2026 | CVSS 7.5 | moby BuildKitA malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the… | |
| CVE-2026-93319 | 5 Oct 2026 | CVSS 5.7 | moby BuildKitA malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the… | |
| CVE-2026-93320 | 5 Oct 2026 | CVSS 6.0 | moby BuildKitBuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations… | |
| CVE-2026-78411 | 5 Oct 2026 | CVSS 6.5 | Rapid7 VelociraptorVelociraptor's SetClientMetadata used the wrong permission check to enforce setting metadata on the server. This allows a user with LABEL_CLIENTS… | |
| CVE-2026-78413 | 5 Oct 2026 | CVSS 5.5 | Rapid7 VelociraptorVelociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with… | |
| CVE-2026-93316 | 5 Oct 2026 | CVSS 7.1 | moby BuildKitIf BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by… | |
| CVE-2026-93317 | 5 Oct 2026 | CVSS 5.9 | moby BuildKitAn unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The… | |
| CVE-2026-105629 | 5 Oct 2026 | CVSS 7.1 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, BulkEstimatePointEndpoint.destroy resolves an estimate point through a bare… | |
| CVE-2026-105630 | 5 Oct 2026 | CVSS 8.7 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, an authenticated low-privilege workspace member, including a Guest, can upload an… | |
| CVE-2026-105631 | 5 Oct 2026 | CVSS 7.5 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, WorkspaceFileAssetEndpoint.get and WorkspaceAssetDownloadEndpoint.get resolve… | |
| CVE-2026-105632 | 5 Oct 2026 | CVSS 8.7 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the GraphQL joinProject mutation lets any workspace member add themselves to any… | |
| CVE-2026-105633 | 5 Oct 2026 | CVSS 7.1 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the V2 issue-attachment PATCH endpoint accepts issue_id in the URL but omits it from… | |
| CVE-2026-42700 | 5 Oct 2026 | CVSS 6.5 | GhozyLab Image Slider WidgetImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GhozyLab Image Slider Widget… | |
| CVE-2026-105384 | 5 Oct 2026 | CVSS 7.3 | UNION HospitalManagementSystemA vulnerability was found in UNION HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected is an unknown function of the… | |
| CVE-2026-105385 | 5 Oct 2026 | CVSS 7.3 | onetwothreeneth HospitalManagementSystemA vulnerability was determined in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. Affected by this… | |
| CVE-2026-105628 | 5 Oct 2026 | CVSS 7.6 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane's OAuth avatar synchronization flow fetches avatar_url from provider user data… | |
| CVE-2026-104977 | 5 Oct 2026 | CVSS 7.7 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link… | |
| CVE-2026-104978 | 5 Oct 2026 | CVSS 8.2 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane's project invitation list endpoint is accessible to any authenticated user who… | |
| CVE-2026-104979 | 5 Oct 2026 | CVSS 8.7 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, IntakeIssuePublicViewSet.create in Plane v1.3.1 writes description_html through… | |
| CVE-2026-104971 | 5 Oct 2026 | CVSS 8.5 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, DuplicateAssetEndpoint fetches a source FileAsset without limiting it to the… | |
| CVE-2026-104973 | 5 Oct 2026 | CVSS 7.6 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-30242 validates webhook IP addresses only when the webhook is… | |
| CVE-2026-104974 | 5 Oct 2026 | CVSS 8.1 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, a user whose account has been deactivated by setting is_active=False can still log… | |
| CVE-2026-104975 | 5 Oct 2026 | CVSS 7.1 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane's dashboard asset endpoints in plane/app/views/asset/v2.py were remediated for… | |
| CVE-2026-104976 | 5 Oct 2026 | CVSS 8.7 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEA_HOST only for its URL scheme and does not reject hosts that… | |
| CVE-2026-102295 | 5 Oct 2026 | CVSS 5.4 | Red Hat Quay 3A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary… | |
| CVE-2026-102576 | 5 Oct 2026 | CVSS 4.2 | Red Hat Quay 3A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting (XSS)… | |
| CVE-2026-104905 | 5 Oct 2026 | CVSS 8.1 | NeoRazorX facturascriptsFacturaScripts before version 2026.7 contains a PHP object injection vulnerability in WidgetSelect::processFormData() that allows authenticated… | |
| CVE-2026-101919 | 5 Oct 2026 | CVSS 8.8 | Red Hat Multicluster Engine for KubernetesA flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) secrets directly into the… | |
| CVE-2025-15643 | 5 Oct 2026 | CVSS 7.1 | Jose Fernandez AdsmonetizerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jose Fernandez Adsmonetizer adsensei-b30 allows… | |
| CVE-2026-78412 | 5 Oct 2026 | CVSS 4.9 | Rapid7 VelociraptorVelociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed. The server checks the API permissions… | |
| CVE-2026-86671 | 5 Oct 2026 | CVSS 8.4 | Eclipse Foundation Eclipse CheIn Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to… | |
| CVE-2026-105382 | 5 Oct 2026 | CVSS 7.3 | onetwothreeneth HospitalManagementSystemA flaw has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This affects the function… | |
| CVE-2026-105383 | 5 Oct 2026 | CVSS 7.3 | onetwothreeneth HospitalManagementSystemA vulnerability has been found in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. This impacts an unknown… | |
| CVE-2026-12171 | 5 Oct 2026 | CVSS 7.8 | cookpete auto-changelogauto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in… | |
| CVE-2026-104965 | 5 Oct 2026 | CVSS 5.4 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the issue-relation endpoint accepts issue UUIDs in the request body without… | |
| CVE-2026-104966 | 5 Oct 2026 | CVSS 8.7 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, two endpoint families fail to verify that nested resource identifiers belong to the… | |
| CVE-2026-104967 | 5 Oct 2026 | CVSS 5.4 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/plane/app/views/issue/… | |
| CVE-2026-104968 | 5 Oct 2026 | CVSS 8.7 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/entity-search/?query_type=user_mention returns… | |
| CVE-2026-104969 | 5 Oct 2026 | CVSS 6.5 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the cycle-issues endpoint accepts issue UUIDs in the request body without validating… | |
| CVE-2026-104970 | 5 Oct 2026 | CVSS 8.1 | makeplane planePlane is an open-source project management tool. From 0.13 until 1.4.0, InstanceAdminSignUpEndpoint in… | |
| CVE-2026-104956 | 5 Oct 2026 | CVSS 5.3 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the unauthenticated public issues endpoint accepts group_by and sub_group_by query… | |
| CVE-2026-104960 | 5 Oct 2026 | CVSS 6.5 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane exposes the workspace-scoped GET… | |
| CVE-2026-104961 | 5 Oct 2026 | CVSS 5.4 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, WorkspaceOwnerPermission does not require is_active=True when checking whether a… | |
| CVE-2026-104962 | 5 Oct 2026 | CVSS 6.5 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, GET /api/v1/workspaces/{slug}/projects/{project_id}/members/ returns the complete… | |
| CVE-2026-104963 | 5 Oct 2026 | CVSS 4.3 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, GET /api/workspaces/{slug}/cycles/ through WorkspaceCyclesEndpoint and GET… | |
| CVE-2026-104964 | 5 Oct 2026 | CVSS 6.8 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, Plane's project update endpoint authorizes the caller against the workspace slug in… | |
| CVE-2026-102779 | 5 Oct 2026 | CVSS 7.3 | joomlafry.com TF Content for JoomlaJoomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes… | |
| CVE-2026-104893 | 5 Oct 2026 | CVSS 5.4 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, GET /api/users/api-tokens/ allows an authenticated user to retrieve API-token… | |
| CVE-2026-104894 | 5 Oct 2026 | CVSS 4.3 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that… | |
| CVE-2026-104955 | 5 Oct 2026 | CVSS 5.4 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, a Project Member with role 15 can send a PATCH request to the project-member update… | |
| CVE-2026-102777 | 5 Oct 2026 | CVSS 6.5 | svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos… | |
| CVE-2026-102282 | 5 Oct 2026 | CVSS 7.1 | adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalationadm-zip is a JavaScript library for creating and extracting ZIP archives in Node.js. Prior to 0.6.1, adm-zip applies the Unix permission bits stored… | Fix |
| CVE-2026-88396 | 5 Oct 2026 | CVSS 7.2 | VulnerabilityApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded… | |
| CVE-2026-88397 | 5 Oct 2026 | CVSS 6.5 | VulnerabilityApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid parameter. | |
| CVE-2026-88393 | 5 Oct 2026 | CVSS 9.8 | VulnerabilityWookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export. The data parameter is base64-decoded… | |
| CVE-2026-88395 | 5 Oct 2026 | CVSS 9.8 | VulnerabilityGouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter. | |
| CVE-2026-37719 | 5 Oct 2026 | CVSS 9.8 | VulnerabilityAn issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component. | |
| CVE-2026-105329 | 5 Oct 2026 | CVSS 6.3 | TallCMSA vulnerability was determined in TallCMS up to 4.8.0. This affects an unknown function of the file… | |
| CVE-2026-105397 | 5 Oct 2026 | CVSS 5.4 | ThimPress LearnPressLearnPress plugin for WordPress through 4.4.9.1 contains a stored cross-site scripting vulnerability that allows authenticated instructors to inject… | |
| CVE-2026-104890 | 5 Oct 2026 | CVSS 7.2 | Kunstmaan CMS: MediaBundle extension blacklist bypass allows authenticated administrators to upload executable PHP files leading to remote code executionKunstmaan CMS is an open source content management system based on the Symfony framework. Prior to 7.3.2… | Fix |
| CVE-2026-104891 | 5 Oct 2026 | CVSS 7.5 | mppx-condition-gate: Free-access path grants on a self-declared wallet without proving controlmppx-condition-gate provides conditional free-access wrappers for mppx payment methods. Prior to @insumermodel/mppx-condition-gate 3.0.0 and… | Fix |
| CVE-2026-104892 | 5 Oct 2026 | CVSS 8.7 | makeplane planePlane is an open-source project management tool. Prior to 1.4.0, aPITokenLogMiddleware logs API keys in plaintext. This allows someone with low… | |
| CVE-2026-102426 | 5 Oct 2026 | CVSS 6.1 | joomshaper.com SP Page Builder (Pro) extension for JoomlaJoomla Extension - joomshaper.com - Reflected XSS in the Dynamic Content Filter addon in SP Page Builder Pro 3.0.0 - 5.6.1p2 - The slider minimum and… | |
| CVE-2026-102428 | 5 Oct 2026 | CVSS 9.8 | ordasoft.com OrdaSoft Joomla CCKJoomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and… | |
| CVE-2026-102775 | 5 Oct 2026 | CVSS 7.5 | phoca.cz Phoca Cart extension for JoomlaJoomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's… | |
| CVE-2026-102776 | 5 Oct 2026 | CVSS 4.3 | svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the… | |
| CVE-2026-102778 | 5 Oct 2026 | CVSS 6.1 | svenbluege.de Event Gallery for JoomlaJoomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a… | |
| CVE-2026-102780 | 5 Oct 2026 | CVSS 9.8 | joomlafry.com TF Content for JoomlaJoomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension… | |
| CVE-2026-89039 | 5 Oct 2026 | CVSS 6.5 | Grafana mcp-k6A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_script argument and receive the… | |
| CVE-2026-79820 | 5 Oct 2026 | CVSS 9.0 | Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out (iLO) 7A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware. | |
| CVE-2026-88391 | 5 Oct 2026 | CVSS 9.8 | VulnerabilityNorthstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /northstar/**, so… |
Page 119 of 168