Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

core-bundle-dev-app — Vulnerabilities & Security Advisories 2

All 2 CVE vulnerabilities found in core-bundle-dev-app, with AI-generated Chinese analysis, references, and POCs.

Vendor: roadiz

CVE IDTitleCVSSSeverityPublished
CVE-2026-42206 Roadiz OpenID Connect nonce generated but never validated — ID token replay attack CWE-345 7.5AIHighAI2026-05-08
CVE-2026-33486 Roadiz has Server-Side Request Forgery (SSRF) in roadiz/documents CWE-918 6.8 Medium2026-03-26

All 2 known CVE vulnerabilities affecting core-bundle-dev-app with full Chinese analysis, references, and POCs where available.