Skip to content
OpenAdvisories

Vendor

0xdps

2 known vulnerabilities.

Products

emailflare 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-121729

    emailflare before commit cf31f33 Missing Authorization via /api/keys Routes

    emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to se…

    0xdps emailflare