Tronclass vulnerabilities
CVEs whose affected-version data names the Tronclass package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-110467Medium· 4.3Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to view the peer review scores of any student.
CVE-2026-110466Medium· 4.3Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability
Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability. Authenticated remote attackers can bypass anonymous grading restrictions and obtain anonymous student information.
CVE-2026-110465Medium· 4.3Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability
Tronclass developed by WisdomGarden has a Insecure Direct Object Reference vulnerability. Authenticated remote attackers can modify a specific parameter to alter the peer review scores of any student.