openpanel vulnerabilities
CVEs whose affected-version data names the openpanel package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
32 CVEsRSS
CVE-2026-77769Medium· 6.5PoCThe report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned getReportsByDashboardId(dashboardId)
The report.list procedure in packages/trpc/src/routers/report.ts accepted a projectId and a dashboardId and returned getReportsByDashboardId(dashboardId). The enforceAccess middleware in packages/trpc/src/trpc.ts verified membership for …
▾ TwilightOpenpanel-dev · openpanelEPSS 0.41%via NVD
CVE-2026-77768Medium· 6.5PoCThe report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(reportId) directly
The report.get procedure in packages/trpc/src/routers/report.ts accepted only a reportId and returned getReportById(reportId) directly. The enforceAccess middleware in packages/trpc/src/trpc.ts evaluates membership only when the input ca…
▾ TwilightOpenpanel-dev · openpanelEPSS 0.41%via NVD