open-object vulnerabilities

CVEs whose affected-version data names the open-object package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-82411Medium· 6.5

1w ago

Objects API: Cross-object-type authorization bypass on the object history-detail endpoint

Open Object provides an API and admin interface to manage objects and object types. From 2.4.3 until 2.5.1, 3.6.2, 4.0.2, and 4.1.1, a token scoped to read one ObjectType can read the full versioned record of an object of any other Objec…

▾ Sunlitmaykinmedia · open-objectEPSS 0.31%via CVEORG