Known Vulnerabilities for Lychee by LycheeOrg
Listed below are 6 of the newest known vulnerabilities associated with "Lychee" by "LycheeOrg".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-77470 json | Lychee is a free, open-source photo-management tool. Prior to 7.7.1, the Supporter or Pro webshop POST /api/v2/Shop/Checkout/... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-77468 json | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, GET /docs/api exposes the Scramble-generated OpenAPI doc... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-77467 json | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee enables ImageMagick PDF support with Ghostscript ... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-77466 json | Lychee is a free, open-source photo-management tool. Prior to 7.7.0, Lychee hides the Omnipay Dummy test provider from the ch... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-62679 json | Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, co... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-61838 json | Lychee is a free, open-source photo-management tool. Prior to 7.6.3, GET /api/v2/Zip authorizes album and photo archives thro... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-61611 json | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, POST /api/v2/Album::unlock has no throttle, attempt coun... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-61610 json | Lychee is a free, open-source photo-management tool. Prior to 7.6.1, when photos_star_visibility is set to anonymous, POST /a... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-57569 json | Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostnam... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-57568 json | Lychee is a free, open-source photo-management tool. Prior to 7.6.0, Lychee permits an authenticated user with album-edit per... | Not Provided | 2026-10-15 | 2026-10-15 |