[ Vendor · 6 CVEs ]
uselotus
CVEs affecting uselotus published in the last 30 days, plus any uselotus CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-115329 | 22 Oct 2026 | CVSS 5.9 | uselotus lotusLotus through 0.10.2 contains an insecure direct object reference vulnerability in SubscriptionViewSet.get_object() that uses an unscoped queryset… | |
| CVE-2026-115330 | 22 Oct 2026 | CVSS 8.8 | uselotus lotusLotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to execute arbitrary SQL by appending… | |
| CVE-2026-115331 | 22 Oct 2026 | CVSS 8.8 | uselotus lotusLotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by supplying crafted billable… | |
| CVE-2026-115332 | 22 Oct 2026 | CVSS 8.8 | uselotus lotusLotus through 0.10.2 contains an sql injection vulnerability that allows authenticated organization users to inject SQL by registering crafted… | |
| CVE-2026-115333 | 22 Oct 2026 | CVSS 5.9 | uselotus lotusLotus through 0.10.2 contains an improper authentication vulnerability in the Go event ingestion middleware that validates API keys by prefix only… | |
| CVE-2026-115334 | 22 Oct 2026 | CVSS 6.8 | uselotus lotusLotus through 0.10.2 contains an authorization bypass vulnerability in ChangeUserOrganizationView.post that allows authenticated users to join any… |