Known Vulnerabilities for Decorator by Webtoffee
Listed below are 1 of the newest known vulnerabilities associated with "Decorator" by "Webtoffee".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-104971 json | Plane is an open-source project management tool. Prior to 1.4.0, DuplicateAssetEndpoint fetches a source FileAsset without li... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-104967 json | Plane is an open-source project management tool. Prior to 1.4.0, BulkDeleteIssuesEndpoint and SubIssuesEndpoint in apps/api/p... | Not Provided | 2026-10-05 | 2026-10-05 |
| CVE-2026-92803 json | LibreTranslate through 1.9.6 omits the access_check decorator from the download_file route, allowing unauthenticated access t... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-92754 json | PatrowlManager through 1.8.4 contains an improper access control vulnerability in the user listing API endpoint where the aut... | Not Provided | 2026-09-16 | 2026-09-17 |
| CVE-2026-83551 json | Cleartext storage of sensitive information in the @step and @remote decorator pipeline component in Amazon SageMaker Python S... | Not Provided | 2026-09-01 | 2026-09-01 |
| CVE-2026-78369 json | RansomLook contains a missing authentication vulnerability in the /admin/crypto/group/new endpoint. While the endpoint provid... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-73405 json | An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server... | Not Provided | 2026-08-12 | 2026-08-12 |
| CVE-2026-71241 json | Book-Management-System's Flask API endpoints /student, /record, /books, /find_stu_book, and /find_not_return_book are missing... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-71203 json | changedetection.io's REST API resources are protected by an @auth.check_token decorator validating the caller's x-api-key hea... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-63101 json | Open Event Server through 1.19.1 contains a missing authentication vulnerability that allows unauthenticated attackers to exp... | Not Provided | 2026-07-17 | 2026-07-17 |