Advisories
Real vulnerabilities.Discovered by Basin.
Vulnerabilities discovered by Basin in widely used software, published after coordinated disclosure. Explore the findings, their impact, and the releases that fix them.
- CVE-2026-111362Django: server-side request forgery via GeoJSON geometriesMedium—
- CVE-2026-121559GLPI: privilege escalation via user cloningHigh8.6
- CVE-2026-119145Frappe: remote code execution via path traversalCritical9.9
- CVE-2026-115189Mautic: Twig sandbox escape via theme templatesHigh8.8
- CVE-2026-96672ERPNext: unsafe reflection via financial report templatesMedium6.4
- CVE-2026-86733Snipe-IT: OS command injection via backup restoreHigh7.2
- CVE-2026-82450BookStack: remote code execution via book cover uploadHigh8.8
- CVE-2026-63493Snipe-IT: two-factor authentication bypass on the APIMedium—
Basin
Evaluate Basin on your systems.
These advisories are findings Basin produced, published after coordinated disclosure. An evaluation runs the same kind of test inside your environment.