Threats affecting pkg:github/seahub

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.7	EPSS 0.7%	CVE-2026-56768haiwen seahub · Missing Authorization High8.7EPSS 0.7%2026-06-25CVE Database V5CVE-2026-56768 Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET /api/v2.1/share-link-zip-task/, allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the GET endpoint to obtain a fileserver zip token and download entire shared directory trees. EPSS 0.7%Vulnerability	CVE Database V5	2026-06-25

Page 1 of 1