Skip to content
OpenAdvisories

Vendor

omnivore-app

3 known vulnerabilities.

Products

omnivore 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-82454

    Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in

    The Omnivore API (packages/api) before the fix in commit abf53d6 contains an authentication bypass in Apple sign-in token verification. The decodeAppleToken function extracted the 'alg' field from the attacker-supplied JWT header and passed it as the sole all…

    omnivore-app omnivore