Threats affecting pkg:github/niaefeup/tts-be

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-88065NIAEFEUP tts-be · Information Exposure High7.5EPSS 0.5%2026-09-15CVE Database V5CVE-2026-88065 A Broken Access Control vulnerability in NIAEFEUP's tts-be backend prior to version 2.1.0 allows remote attackers to bypass authorization checks by chaining unauthenticated API endpoints. This enables enumeration and extraction of sensitive Personally Identifiable Information (PII) including full names, student IDs, class schedules, and photos. The issue was fixed in version 2.1.0. EPSS 0.5%Vulnerability CWE-200	CVE Database V5	2026-09-15

Page 1 of 1