Blossom-Editor Blossom
2 CVEs affecting Blossom-Editor Blossom. Latest disclosed: 2026-10-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-119659 | Medium | 5.4 | 2026-10-30 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users' folders because FolderService quer… |
CVE-2026-119644 | Medium | 5.4 | 2026-10-30 | Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying… |