Coopcycle Coopcycle-Web
2 CVEs affecting Coopcycle Coopcycle-Web. Latest disclosed: 2026-11-04. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-121945 | High | 7.6 | 2026-11-04 | CoopCycle coopcycle-web before 6.20.1 contains a broken access control vulnerability that allows any courier to read and modify every incident because Incident… |
CVE-2026-121620 | Medium | 6.5 | 2026-11-04 | CoopCycle coopcycle-web 5.6.0 before 6.20.0 contains a missing authentication vulnerability that allows unauthenticated attackers to forge Zelty webhook events… |