Skip to content
OpenAdvisories

Vendor

rochacbruno

2 known vulnerabilities.

Products

marmite 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-102811

    Marmite through 0.4.2 Unauthenticated API Access via Development Server

    Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. At…

    rochacbruno marmite
  • High 7.5
    CVE-2026-102810

    Marmite through 0.4.2 Path Traversal via Development Server

    Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handle_request function in src/server.rs fails to reject .. segments after percent-de…

    rochacbruno marmite