approval vulnerabilities
CVEs whose affected-version data names the approval package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-82982Medium· 4.3The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting a file whose contents changed after they reviewed it
The Approval app's approve/reject endpoint is meant to require the file's current etag as a freshness check, preventing an approver from approving or rejecting a file whose contents changed after they reviewed it. The backend only enforc…
▾ SunlitNextcloud · ApprovalEPSS 0.33%via NVD
CVE-2025-66515Low· 2.7The Nextcloud Approval app allows approval or disapproval of files in the sidebar
The Nextcloud Approval app allows approval or disapproval of files in the sidebar. Prior to 1.3.1 and 2.5.0, an authenticated user listed as a requester in a workflow can set another user’s file into the “pending approval” without access…
▾ Sunlitnextcloud · approvalEPSS 0.31%via NVD