Skip to content
OpenAdvisories

Vendor

midday-ai

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.1

    Midday Missing Owner Check on Team Deletion

    Midday allows any member of a team to delete it. The delete procedure in apps/api/src/trpc/routers/team.ts authorises the caller with the team-access helper, which returns true for every row in the team-membership table irrespective of the role it records, an…