Skip to content
OpenAdvisories

Vendor

we-promise

1 known vulnerabilities.

Products

sure 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-110772

    Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update

    Sure 0.7.0 through 0.7.6-alpha.6 contains a missing authorization vulnerability in Transactions::BulkUpdatesController#create that allows family members to bypass account sharing permissions. Authenticated members with read_only or no share can submit arbitra…

    we-promise sure