Threats affecting pkg:github/xmyronn/CodeAstro-Job-Portal

CVE-2026-7071 is a medium-severity vulnerability in CodeAstro Online Job Portal version 1.0 that allows remote attackers to expose file and directory information via manipulation of the /users/user-cvs/ file or directory. The vulnerability has been publicly disclosed but no official patch or remediation guidance is currently available from the vendor. Exploitation does not require privileges or user interaction. The CVSS 4.0 base score is 6.9, reflecting network attack vector and low complexity. No known exploits in the wild have been reported.