Skip to content
OpenAdvisories

Vendor

gorse-io

1 known vulnerabilities.

Products

gorse 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-56782 Public exploit

    Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints

    Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote att…

    gorse-io gorse