Skip to content
OpenAdvisories

Vendor

jordan-dalby

1 known vulnerabilities.

Products

ByteStash 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-126658

    ByteStash 1.5.10 before 1.6.2 Insufficient Session Expiration via API Keys

    ByteStash 1.5.10 before 1.6.2 contains an insufficient session expiration vulnerability that allows holders of API keys to keep access after account deactivation because validateApiKey never checks account status. Attackers holding a deactivated account's API…

    jordan-dalby ByteStash