[ Vendor · 2 CVEs ]

blossom-editor

CVEs affecting blossom-editor published in the last 30 days, plus any blossom-editor CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-119659 30 Oct 2026 CVSS 5.4 blossom-editor BlossomBlossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users' folders because…
CVE-2026-119644 30 Oct 2026 CVSS 5.4 blossom-editor BlossomBlossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by…