Skip to content
OpenAdvisories

Product · maybe-finance

maybe

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-63100

    Maybe 0.6.0 Missing Authorization via HostingsController show/update

    Maybe through 0.6.0 contains a missing authorization vulnerability that allows authenticated low-privilege member-role users to access and modify global hosting settings by exploiting unprotected show and update actions in the Settings::HostingsController, wh…

    maybe-finance maybe