serpbear vulnerabilities

CVEs whose affected-version data names the serpbear package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119705Medium· 5.3

1w ago

SerpBear before 3.1.1 Missing Authentication via POST /api/notify

SerpBear before 3.1.1 contains a missing authentication vulnerability in pages/api/notify.ts that allows remote unauthenticated attackers to trigger notification emails because verifyUser() is never called. Attackers can repeatedly POST …

▾ Sunlittowfiqi · serpbearEPSS 0.63%via CVEORG