Skip to content
OpenAdvisories

Vendor

blossom-editor

2 known vulnerabilities.

Products

Blossom 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-119659

    Blossom through 1.17.1 Authorization Bypass via Folder Endpoints

    Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users' folders because FolderService queries filter only on folder id. Attackers can supply another user's folder id to /folder/info, /folder…

    blossom-editor Blossom
  • Medium 5.4
    CVE-2026-119644

    Blossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints

    Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star …

    blossom-editor Blossom