Skip to content
OpenAdvisories

Product · gorse-io

gorse

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-56782 Public exploit Scanner template

    Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints

    Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote att…

    gorse-io gorse