Threats affecting pkg:github/iris-web

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.4%	CVE-2026-92605dfir-iris iris-web · Insecure Direct Object Reference High7.1EPSS 0.4%2026-09-16CVE Database V5CVE-2026-92605 IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for notes, tasks, IOCs, assets, and evidence items. Attackers with access to any single case can enumerate sequential object identifiers and read comment threads from cases they have no authorization to access. EPSS 0.4%Vulnerability	CVE Database V5	2026-09-16

Page 1 of 1