Skip to content
OpenAdvisories

Product · Towfiq I.

serpbear

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-119705

    SerpBear before 3.1.1 Missing Authentication via POST /api/notify

    SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenticated attackers to trigger notification emails because verifyUser() is never called. Attackers can repeatedly POST to /api/notify, option…

    Towfiq I. serpbear