Skip to content
OpenAdvisories

Vendor

TarsCloud

2 known vulnerabilities.

Products

TarsWeb 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-80348

    TarsWeb through 3.0.16 Missing Authorization on Patch Deploy, Download and Delete Endpoints

    TarsWeb enforces its per-application roles by calling AuthService from individual controller methods, and four methods in app/controller/patch/PatchController.js make no such call. uploadAndPublish accepts a package upload and then builds and dispatches a dep…

    TarsCloud TarsWeb