https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 17:24:51 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-82982 <p>The Approval app&#39;s approve/reject endpoint is meant to require the file&#39;s current etag as a freshness check, preventing an approver from approving or rejecting a file whose contents changed after they reviewed it. The backend only enforced this check when the etag parameter was present and non-empty in the request. An attacker able to intercept and modify the approval request could omit the etag field entirely, bypassing the freshness check and approving or rejecting a file version they never reviewed.</p> <p>The Approval app&#39;s approve/reject endpoint is meant to require the file&#39;s current etag as a freshness check, preventing an approver from approving or rejecting a file whose contents changed after they reviewed it. The backend only enforced this check when the etag parameter was present and non-empty in the request. An attacker able to intercept and modify the approval request could omit the etag field entirely, bypassing the freshness check and approving or rejecting a file version they never reviewed.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-82982 https://vulnerability.circl.lu/vuln/ghsa-w4mj-3r4x-wxm3 <p>The Approval app&#39;s approve/reject endpoint is meant to require the file&#39;s current etag as a freshness check, preventing an approver from approving or rejecting a file whose contents changed after they reviewed it. The backend only enforced this check when the etag parameter was present and non-empty in the request. An attacker able to intercept and modify the approval request could omit the etag field entirely, bypassing the freshness check and approving or rejecting a file version they never reviewed.</p> <p>The Approval app&#39;s approve/reject endpoint is meant to require the file&#39;s current etag as a freshness check, preventing an approver from approving or rejecting a file whose contents changed after they reviewed it. The backend only enforced this check when the etag parameter was present and non-empty in the request. An attacker able to intercept and modify the approval request could omit the etag field entirely, bypassing the freshness check and approving or rejecting a file version they never reviewed.</p> https://vulnerability.circl.lu/vuln/ghsa-w4mj-3r4x-wxm3