oss-apps has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 3.7 (low).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 3.7
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Weakness classes
Products
- SplitPro 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
oss-apps vulnerabilities
CVEs affecting oss-apps, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-122317Medium· 4.3SplitPro through 2.1.6 Authorization Bypass via user.getUserDetails tRPC Query
SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary userId values to user.getUserDetails. Attackers can iterate sequential integer…
▾ Sunlitoss-apps · SplitProEPSS 0.23%via CVEORG
CVE-2026-122324Low· 3.1SplitPro through 2.1.6 Authorization Bypass via expense.getExpenseDetails
SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users' expenses by supplying arbitrary expenseId values to expense.getExpenseDetails. Attackers who obtain an expense UUI…
▾ Sunlitoss-apps · SplitProEPSS 0.22%via CVEORG