Skip to content
OpenAdvisories

Vendor

Zoeille

1 known vulnerabilities.

Products

picsou-finance 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-62860

    Picsou vulnerable to login timing attack

    Picsou is a self-hosted personal finance dashboard. In the affected login implementation, the `/api/auth/login` endpoint reveals whether a username exists through a timing discrepancy. In `backend/src/main/java/com/picsou/controller/AuthController.java`, `Aut…

    Zoeille picsou-finance