Skip to content
OpenAdvisories

Vendor

robiningelbrecht

1 known vulnerabilities.

Products

dreeve 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-121545

    Dreeve before 5.8.0 Missing Authentication in Strava Webhook POST Handler

    Dreeve before 5.8.0 contains a missing authentication vulnerability in StravaWebhookRequestHandler::handleEvent that allows unauthenticated attackers to forge Strava webhook events without signature, verify-token or owner_id checks. Attackers can send forged …

    robiningelbrecht dreeve