Browse all 4 CVE security advisories affecting solidtime-io. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-76806 | Solidtime: Path Traversal in Toggl ZIP Data Importer - arbitrary directory creation + filesystem existence oracle — solidtime CWE-22 | 6.3 | Medium | 2026-11-04 |
| CVE-2026-47236 | Solidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permission — solidtime CWE-863 | 4.3 | Medium | 2026-06-12 |
| CVE-2026-42279 | solidtime: Time entry update endpoint allows cross-organization modification of a known time-entry UUID — solidtime CWE-639 | 5.8 | Medium | 2026-05-08 |
| CVE-2026-33345 | solidtime vulnerable to IDOR in private projects — solidtime CWE-639 | 6.5 | Medium | 2026-03-24 |
This page lists every published CVE security advisory associated with solidtime-io. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.