VulnSea

The-Commit-Company has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 4.8 (medium).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
4.8
Publish → KEV
—
Last 90 days
2 prev 0

Weakness classes

Products

  • raven 2
Follow The-Commit-Company:RSS feedSave a search →Embed badge ↗
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

The-Commit-Company vulnerabilities

CVEs affecting The-Commit-Company, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-108731Medium· 5.4
2w ago

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the can_only_join_via_invite setting

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability that allows authenticated users to join invite-only Public workspaces by ignoring the can_only_join_via_invite setting. Attackers with the Raven User role can call …

▾ SunlitThe-Commit-Company · ravenEPSS 0.22%via NVD
CVE-2026-108730Medium· 4.3PoC
2w ago

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability in legacy methods in raven/api/raven_message.py that skip the workspace membership check

Raven 2.0.0 through 3.0.0 contains a missing authorization vulnerability in legacy methods in raven/api/raven_message.py that skip the workspace membership check. Authenticated non-members can call get_messages_with_dates or get_all_file…

▾ TwilightThe-Commit-Company · ravenEPSS 0.32%via NVD
The-Commit-Company vulnerabilities (CVEs) · VulnSea