Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-113596 1 Webstudio-is 1 Webstudio 2026-10-20 3.1 Low
Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the publishedBuilds and findManyByIds tRPC procedures. Attackers who know another user's project UUID can query the /trpc handler to retrieve publish history, titles, domains, preview images, and latest builds.