Skip to content
OpenAdvisories

Vendor

openwhyd

3 known vulnerabilities.

Products

openwhyd/openwhyd 2 openwhyd 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-123617

    Openwhyd before 1.65.1 NoSQL Injection via POST /api/user

    Openwhyd before 1.65.1 contains a NoSQL injection vulnerability that allows unauthenticated attackers to manipulate user lookups by passing JSON objects in the id parameter. Attackers can send MongoDB query operators such as $ne or $gt to POST /api/user to se…

    openwhyd openwhyd