CLA-Assistant vulnerabilities

CVEs whose affected-version data names the CLA-Assistant package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-89112Medium· 6.5

2w ago

The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privilege…

The admin API endpoint used to retrieve CLA signature records does not consistently enforce the required authorization checks when the target organisation is specified using an organisation ID.An authenticated user with limited privilege…

▾ SunlitSAP_SE · CLA-AssistantEPSS 0.21%via NVD