[ Vendor · 3 CVEs ]
pawelmalak
CVEs affecting pawelmalak published in the last 30 days, plus any pawelmalak CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100418 | 25 Sep 2026 | CVSS 5.3 | pawelmalak flameFlame through 2.4.0 contains an information exposure vulnerability in the unauthenticated GET /api/config endpoint that returns the entire… | |
| CVE-2026-100501 | 25 Sep 2026 | CVSS 6.5 | pawelmalak flameFlame through 2.4.0 contains an improper restriction of excessive authentication attempts vulnerability in the POST /api/auth login endpoint that… | |
| CVE-2026-100502 | 25 Sep 2026 | CVSS 5.0 | pawelmalak flameFlame through 2.4.0 contains an insufficient session expiration vulnerability in the login endpoint that allows attackers with former admin access to… |