Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ActualBudget Missing Auth on SimpleFIN/PluggyAI Endpoints (CVE-2026-27584)

github.com 2026-02-25 查看中文 →
Security Advisory GHSA-m2cq-xjgm-f668 Critical Actual
Affected:
  • ActualBudget <= 26.2.0
Fixed in:
  • >= 26.2.1
Referenced CVEs: CVE-2026-27584
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
pgjdbc 42.7.4-42.7.13 Data Padding Flaw & Fix 2026-10-08 PostgreSQL JDBC Driver requireAuth Authentication Bypass (CVE-2026-107314) 2026-10-08 AsyncHttpClient WebSocket Proxy Credential Leakage Vulnerability 2026-10-08 AsyncHttpClient WebSocket Proxy Tunnel Credential Leak Vulnerability and Fix 2026-10-08 AsyncHttpClient CVE-2026-107285 WebSocket Proxy Credential Leakage via CONNECT Tunnel 2026-10-08
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro