Skip to content
OpenAdvisories

Vendor

webstudio-is

2 known vulnerabilities.

Products

webstudio 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-113596

    Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds

    Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other users' project data via the publishedBuilds and findManyByIds tRPC procedures. Attackers who know another user's project UUID can query the /…

    webstudio-is webstudio