[ Vendor · 2 CVEs ]
TomBursch
CVEs affecting TomBursch published in the last 30 days, plus any TomBursch CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111899 | 19 Oct 2026 | CVSS 4.3 | TomBursch kitchenowlKitchenOwl through 0.7.10 contains a server-side request forgery vulnerability in recipe import that allows authenticated household members to bypass… | |
| CVE-2026-101033 | 27 Sep 2026 | CVSS 4.3 | TomBursch kitchenowlKitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers… |