Threats affecting pkg:github/microrealestate/microrealestate

CVE-2026-57871 is a high severity relative path traversal vulnerability in the file upload functionality of MicroRealEstate through version 1.0.0-alpha3. It allows attackers to manipulate file paths during upload to potentially overwrite system files. No patch or official fix is currently available.

MicroRealEstate versions up to 1.0.0-alpha3 are affected by broken object-level access controls in its PDF generator functionality. This vulnerability allows unauthorized access to objects that should be restricted. No patch or fix is currently available for this issue. There are no known exploits in the wild. The vulnerability is categorized under CWE-639, which relates to authorization bypass through improper access control. The severity is assessed as high based on the provided data.