Skip to content
OpenAdvisories

Vendor

teelur

1 known vulnerabilities.

Products

budget-board 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2026-68551

    Budget Board's OIDC login links to an existing local account by email alone, with no email_verified check, enabling account takeover of pre-existing users

    Budget Board is an app for tracking monthly spending and working towards financial goals. Prior to version 3.6.2, Budget Board's OIDC login flow finds and signs into an existing local account purely by matching the email address asserted in the identity provi…

    teelur budget-board