Skip to content
OpenAdvisories

Vendor

ONEARMY

1 known vulnerabilities.

Products

community-platform 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-116018

    ONEARMY community-platform before 2.165.2 IDOR via notification read endpoint

    ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows authenticated users to mark other users' notifications as read via POST /api/notifications/:id/read. Attackers can iterate sequential notification…

    ONEARMY community-platform