Threats tagged 'ghsa-22gg-289x-58qq'

CVE-2026-19213 is a medium severity vulnerability in WonderTrader versions up to 0.9.9 affecting the Pending Order Handler component. The flaw exists in the _undone_qty function within src/WtCore/TraderAdapter.h, where manipulation of the getUndoneQty argument can enforce unintended behavioral workflow. The vulnerability is remotely exploitable, and public exploit code is available. The vendor has not responded to disclosure attempts and no patch or fix is currently known.