CVE-2026-95654

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-95654
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95654.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-95654
Published
2026-09-22T15:24:12Z
Modified
2026-09-24T03:46:46Z
Severity
  • 9.1 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token
Details

Databasement before 1.7.14 validates invitation tokens only when the acceptance page loads, caching the authorization decision without re-checking token validity during acceptance. Attackers with a leaked or forwarded invitation link can load the page while pending, then accept the invitation after the legitimate user has already accepted it to overwrite the account password and gain authenticated access to managed database credentials and secrets.

Database specific 
{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-863"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/95xxx/CVE-2026-95654.json"
}
References

Affected packages

Git / github.com/david-crty/databasement

Affected ranges

Type
GIT
Repo
https://github.com/david-crty/databasement
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
afeb9a745446e0fd9d84095969589e81522f36b9
Fixed
128efeaf6bc9ad4a63940f4c3030a56ab2969778
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "fixed":  "1.7.14"
        }
    ],
    "source":  [
        "DESCRIPTION",
        "REFERENCES"
    ]
}

Affected versions

databasement-0.*
databasement-0.1.1
databasement-0.1.10
databasement-0.1.14
databasement-0.1.15
databasement-0.1.16
databasement-0.1.17
databasement-0.1.18
databasement-0.1.19
databasement-0.1.2
databasement-0.1.20
databasement-0.1.21
databasement-0.1.3
databasement-0.1.4
databasement-0.1.5
databasement-0.1.6
databasement-0.1.7
databasement-0.1.8
databasement-0.1.9
v1.*
v1.0.0
v1.0.1
v1.0.10
v1.0.11
v1.0.12
v1.0.2
v1.0.3
v1.0.4
v1.0.5
v1.0.6
v1.0.7
v1.0.8
v1.0.9
v1.1.0
v1.1.1
v1.1.2
v1.1.3
v1.1.4
v1.1.5
v1.1.6
v1.1.7
v1.2.0
v1.2.1
v1.2.10
v1.2.11
v1.2.12
v1.2.2
v1.2.3
v1.2.4
v1.2.5
v1.2.6
v1.2.7
v1.2.8
v1.2.9
v1.3.0
v1.3.1
v1.4.0
v1.4.1
v1.4.2
v1.5.0
v1.5.1
v1.5.2
v1.5.3
v1.5.4
v1.5.5
v1.5.6
v1.6.0
v1.6.1
v1.6.10
v1.6.11
v1.6.12
v1.6.2
v1.6.3
v1.6.4
v1.6.5
v1.6.6
v1.6.7
v1.6.8
v1.6.9
v1.7.0
v1.7.1
v1.7.10
v1.7.11
v1.7.12
v1.7.13
v1.7.2
v1.7.3
v1.7.4
v1.7.5
v1.7.6
v1.7.7
v1.7.8
v1.7.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-95654.json"