[ Vendor · 3 CVEs ]
CodeWithCJ
CVEs affecting CodeWithCJ published in the last 30 days, plus any CodeWithCJ CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113612 | 20 Oct 2026 | CVSS 5.4 | CodeWithCJ SparkyFitnessSparkyFitness before 0.17.0 contains a missing authorization vulnerability that allows authenticated users to delete other users' food variants via… | |
| CVE-2026-92263 | 16 Oct 2026 | CVSS 7.2 | CodeWithCJ SparkyFitnessSparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, the api/admin/backup/restore endpoint… | |
| CVE-2026-102923 | 16 Oct 2026 | CVSS 5.4 | CodeWithCJ SparkyFitnessSparkyFitness is a self-hosted, AI-powered health and fitness tracker for families. Prior to 1.6.0, SparkyFitnessServer/services/chatService.ts and… |