eventyay-exhibition vulnerabilities

CVEs whose affected-version data names the eventyay-exhibition package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-122325Low· 3.1

yesterday

eventyay-exhibition through commit f68888e Cross-Event Attendee Data Disclosure via Lead Creation API

fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulnerability in the exhibitor lead creation API that allows exhibitors to access other organizers' attendee data. Exhibitors with lead scanning enabled…

▾ Sunlitfossasia · eventyay-exhibitionEPSS 0.22%via CVEORG