[ Vendor · 1 CVEs ]
daptin
CVEs affecting daptin published in the last 30 days, plus any daptin CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-62160 | 30 Oct 2026 | CVSS 8.7 | Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddlewareDaptin is a GraphQL/JSON-API headless CMS. Prior to 0.12.26, the global `LanguageMiddleware` in `server/language.go` passes the raw `Accept-Language`… |