Threats tagged 'ghsa-qg7r-2qmf-p77f'

VitaFit cloud API versions before 2026-10-30 had a misconfigured cloud storage bucket vulnerability that allowed unauthenticated attackers to list and download stored files. The exposed bucket contained approximately 129,947 objects, including 126,881 user-uploaded profile images, enabling access to sensitive personal data without requiring credentials.