[ Vendor · 5 CVEs ]
roostorg
CVEs affecting roostorg published in the last 30 days, plus any roostorg CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-63400 | 30 Oct 2026 | CVSS 2.3 | roostorg coopCoop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the password row without invalidating… | |
| CVE-2026-63401 | 30 Oct 2026 | CVSS 5.3 | roostorg coopCoop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `addAccessibleQueuesForUser` and `removeAccessibleQueuesForUser`… | |
| CVE-2026-63396 | 30 Oct 2026 | CVSS 8.7 | roostorg coopCoop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.allOrgs` through… | |
| CVE-2026-63398 | 30 Oct 2026 | CVSS 7.4 | roostorg coopCoop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolved the authenticated user by… | |
| CVE-2026-63399 | 30 Oct 2026 | CVSS 6.9 | roostorg coopCoop is an open source review and moderation tool from ROOST. Prior to 1.0.0, the `GraphQL` `Mutation.createOrg` operation allows an unauthenticated… |