[ Vendor · 1 CVEs ]
we-promise
CVEs affecting we-promise published in the last 30 days, plus any we-promise CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110772 | 14 Oct 2026 | CVSS 4.3 | we-promise sureSure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#create that allows family… |