| CVE-2026-120461 |
Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves…
|
8.7
Élevée
|
2 nov. 2026 |
| CVE-2026-120460 |
Jpom through 2.11.12 contains a cross-workspace authorization bypass vulnerability that allows authenticated users to…
|
8.7
Élevée
|
2 nov. 2026 |
| CVE-2026-120201 |
Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to…
|
9.3
Critique
|
31 oct. 2026 |
| CVE-2026-111605 |
Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated…
|
8.6
Élevée
|
16 oct. 2026 |
| CVE-2026-91993 |
Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list…
|
5.3
Moyenne
|
15 sept. 2026 |