Known Vulnerabilities for Php Permissions Sdk by Paypal
Listed below are 1 of the newest known vulnerabilities associated with "Php Permissions Sdk" by "Paypal".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-78337 json | Unrestricted Upload of File with Dangerous Type in the company logo upload in Roskus Prospero Flow CRM before 5.15.13 allows ... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-77811 json | Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user ... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-77780 json | Authorization Bypass Through User-Controlled Key in the transaction save endpoint in Roskus Prospero Flow CRM 4.9.1 through 5... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-77081 json | n8n before 1.123.69, 2.x before 2.33.4, and 2.x before 2.34.1 contain an allowed-domains bypass in the GraphQL node. When the... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-77069 json | n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-acc... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-76647 json | Leantime JSON-RPC API through version 3.9.0 contains a missing authorization vulnerability in the JSON-RPC dispatcher in app/... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76614 json | OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. The archrestore_sel POST pa... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-76399 json | In Splunk AI Toolkit versions below 6.0.1, a user who holds the "power" Splunk role could modify app-provided scheduled searc... | Not Provided | 2026-08-19 | 2026-08-19 |
| CVE-2026-76388 json | In Splunk Enterprise Security versions below 8.6.1, a user who holds the ess_analyst Splunk Enterprise Security role could ch... | Not Provided | 2026-08-19 | 2026-08-21 |
| CVE-2026-76370 json | In Splunk SOAR versions below 8.6.0, an authenticated user with restricted tenant access could use the Representational State... | Not Provided | 2026-08-19 | 2026-08-20 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Paypal | Php Permissions Sdk | 3.9.1 | |||
| Application | Paypal | Php Permissions Sdk | 3.9.0 | |||
| Application | Paypal | Php Permissions Sdk | 3.8.107 | |||
| Application | Paypal | Php Permissions Sdk | 3.8.106 | |||
| Application | Paypal | Php Permissions Sdk | 3.7.106 | |||
| Application | Paypal | Php Permissions Sdk | 3.6.106 | |||
| Application | Paypal | Php Permissions Sdk | 3.5.103 | |||
| Application | Paypal | Php Permissions Sdk | 3.4.102 | |||
| Application | Paypal | Php Permissions Sdk | 2.6.107 | |||
| Application | Paypal | Php Permissions Sdk | 2.6.106 | |||
| Application | Paypal | Php Permissions Sdk | 2.5.106 | |||
| Application | Paypal | Php Permissions Sdk | 2.4.103 | |||
| Application | Paypal | Php Permissions Sdk | 2.3.101 | |||
| Application | Paypal | Php Permissions Sdk | 2.3.100 | |||
| Application | Paypal | Php Permissions Sdk | 2.2.98 | |||
| Application | Paypal | Php Permissions Sdk | 2.1.96 |