Threats affecting pkg:github/getrebuild/rebuild

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-125372getrebuild rebuild · Insecure Direct Object Reference Medium5.32026-11-09CVE Database V5CVE-2026-125372 CVE-2026-125372 is an authorization bypass vulnerability in getrebuild's REBUILD product versions before 4.5.3. It affects the FeedsListController's fetchDetails and fetchComments functions, allowing authenticated attackers to bypass privilege checks and access private or team-scoped feed content, including images, attachments, and comments by enumerating sequential IDs. Vulnerability	CVE Database V5	2026-11-09

Page 1 of 1 · 1 duplicate CVE record merged