harung1993 dollardollar vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 7.1CVE-2026-125365EPSS 0.3%2026-11-10

   DollarDollar through 4.4 contains a missing authorization vulnerability in add_expense() that allows authenticated users to modify other users' account balances by supplying foreign account_id values. Attackers can submit sequential accoun…