Skip to content
OpenAdvisories

Vendor

antiwork

1 known vulnerabilities.

Products

gumroad 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-59805

    Gumroad < 2026.07.06.2 - Insecure Direct Object Reference in PurchasesController

    Gumroad before 2026.07.06.2 contains a broken access control vulnerability in the PurchasesController that allows authenticated sellers to manipulate purchase access for other sellers' products by sending PUT requests to the revoke_access and undo_revoke_acce…

    antiwork gumroad