miaomiaowu vulnerabilities

CVEs whose affected-version data names the miaomiaowu package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119598Medium· 4.3

1w ago

Miaomiaowu before 0.9.3 Cross-User Proxy Provider Config Disclosure via external_subscription_id

Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/proxy-provider-configs that allows authenticated users to read other users' configurations. Attackers can iterate the global auto-increment e…

▾ Sunlitiluobei · miaomiaowuEPSS 0.35%via CVEORG