mereithhh vanblog vulnerabilities, newest first

By year: all 2026 2025 2024 2023 2022 2021

1. 6.9CVE-2026-125376EPSS 0.3%2026-11-10

   VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read private and hidden articles via the POST /api/public/article/:id endpoint. Attackers can submit any non-empty password fo…