[ Vendor · 1 CVEs ]
actualbudget
CVEs affecting actualbudget published in the last 30 days, plus any actualbudget CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-57449 | 25 Sep 2026 | CVSS 7.1 | Actual Sync Server: CORS Proxy GitHub API Allowlist Prefix Bypass Leaks Private Repositories Through the Server GitHub TokenActual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch… | Fix |