Sync-Server Session Validation Flaw: Disabled Users Retain Access

github.com 2026-07-08查看中文 →

Security Advisoryactualbudget/actual@c8cb8a2Mediumactualbudget

Affected:

actualbudget sync-server

Fixed in:

after commit c8cb8a2 (#7940)

Referenced CVEs: CVE-2026-49229 · 8.3

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

ClickHouse Client SQL Injection via Trailing Backslash 2026-07-29 SQL Injection in @hypequery/clickhouse parameter escaping (CVE-2024-5468) 2026-07-29 SQL Injection Vulnerability in @hypequery/clickhouse escapeValue Function and Fix 2026-07-29 openhole-server Path Traversal via URL-Encoded Request (CVE-2024-54650) 2026-07-29 Local Proxy Path Traversal Vulnerability Fix Analysis: URL Encoding Handling 2026-07-29

Offline Archive

Offline screenshot & PDF are Pro-exclusive