Skip to content
OpenAdvisories

Product · rybbit-io

rybbit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-82287

    Rybbit Reflects Any Origin in CORS Responses While Allowing Credentials

    Rybbit before 2.7.0 contains a CORS misconfiguration vulnerability that allows attackers to bypass origin restrictions by reflecting any request origin in Access-Control-Allow-Origin responses while credentials are enabled. Attackers can issue credentialed cr…

    rybbit-io rybbit