Skip to content
OpenAdvisories

Vendor

growchief

1 known vulnerabilities.

Products

growchief 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-110773

    GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint

    GrowChief through 0.3.0 contains a missing authorization vulnerability in the getAllUsers handler that allows any authenticated user to list users across all organizations because the IsSuperAdmin guard is absent. Attackers with a self-registered low-privileg…

    growchief growchief