Known Vulnerabilities for Decorator by Webtoffee
Listed below are 1 of the newest known vulnerabilities associated with "Decorator" by "Webtoffee".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115720 json | Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the assert_not_priv... | Not Provided | 2026-10-26 | 2026-10-26 |
| CVE-2026-113593 json | An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. The `django.middleware.cache.Up... | Not Provided | 2026-11-03 | 2026-11-03 |
| CVE-2026-111764 json | A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol. Prior to 1.3.0.Final, the default InMemoryTaskStore... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-104971 json | Plane is an open-source project management tool. Prior to 1.4.0, DuplicateAssetEndpoint fetches a source FileAsset without li... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104967 json | Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/p... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-92803 json | LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access t... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92754 json | PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the aut... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-83551 json | Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python S... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-78369 json | RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provid... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-63471 json | fastapi-code-generator creates FastAPI applications from OpenAPI files. Prior to 0.8.1, the generator inserts an OpenAPI path... | Not Provided | 2026-11-03 | 2026-11-07 |