rallly vulnerabilities
CVEs whose affected-version data names the rallly package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-92565Medium· 5.3Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthenticated callers
Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthenticated callers. Attackers can access a poll's urlId from pub…
▾ Sunlitlukevella · ralllyEPSS 0.46%via NVD
CVE-2025-66027Medium· 6.5Rallly is an open-source scheduling and collaboration tool
Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.6, an information disclosure vulnerability exposes participant details, including names and email addresses through the /api/trpc/polls.get,polls.participan…
▾ Sunlitrallly · ralllyEPSS 0.35%via NVD