Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-52819
  • github.com/kimai/kimai
 Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the target 15 Sep
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-4m8q-55qv-9pwp
  • Packagist/kimai/kimai
 Kimai: Teamlead authorization bypass in GET /api/timesheets allows reading other users' timesheet records without being teamlead of the target 13 Jul
  • Fix available
  • Severity - 6.3 (Medium)