Description
Unauthenticated Broken Access Control in Koji <= 2.2.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Anders Norén | Koji | ≤ 2.2.1 | — |
High · 7.5
CVE-2026-74020
EUVD-2026-63320GHSA-wh6c-f85q-gq2p
WordPress Koji theme <= 2.2.1 - Broken Access Control vulnerability
Published Aug 20, 2026 · Updated Aug 20, 2026 · Assigned by Patchstack