Known Vulnerabilities for Casdoor by Casbin
Listed below are 8 of the newest known vulnerabilities associated with "Casdoor" by "Casbin".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-91998 json | Casdoor through 4.4.0 contains an authorization bypass vulnerability in the /api/mcp endpoint that allows attackers with any ... | Not Provided | 2026-09-15 | 2026-09-17 |
| CVE-2026-90942 json | Casdoor through 4.4.0 fails to properly mask the instance-wide built-in certificate private key in /api/get-certs and /api/ge... | Not Provided | 2026-09-14 | 2026-09-14 |
| CVE-2026-84423 json | A vulnerability has been found in Casdoor up to 4.0.0. This affects an unknown function of the file controllers/resource.go o... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-6815 json | Not Provided | 2026-05-11 | 2026-06-01 | |
| CVE-2026-5469 json | Not Provided | 2026-04-03 | 2026-07-24 | |
| CVE-2026-5468 json | Not Provided | 2026-04-03 | 2026-07-24 | |
| CVE-2026-5467 json | Not Provided | 2026-04-03 | 2026-07-24 | |
| CVE-2025-61524 json | An issue in the permission verification module and organization/application editing interface in Casdoor v2.26.0 and before, ... | Not Provided | 2025-10-08 | 2026-07-05 |
| CVE-2023-34927 json | Casdoor v1.331.0 and below was discovered to contain a Cross-Site Request Forgery (CSRF) in the endpoint /api/set-password. T... | 6.5 - MEDIUM | 2023-06-22 | 2023-06-28 |
| CVE-2022-44942 json | Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function. | 8.1 - HIGH | 2022-12-07 | 2022-12-08 |