F
7 CVEs across 2 F products. Browse F vulnerabilities, severities, and proof-of-concept exploits.
F products with known CVEs
F CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-22665 | High | 8.1 | 2026-04-03 | prompts.chat prior to commit 1464475, contains an identity confusion vulnerability due to inconsistent case-sensitive and case-insensitive handling of username… |
CVE-2026-22664 | High | 7.7 | 2026-04-03 | prompts.chat prior to commit 30a8f04 contains a server-side request forgery vulnerability in the Fal.ai media status polling feature that allows authenticated… |
CVE-2026-22663 | High | 7.5 | 2026-04-03 | prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metad… |
CVE-2026-22662 | Medium | 4.3 | 2026-04-03 | prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to… |
CVE-2026-22661 | High | 8.1 | 2026-04-03 | prompts.chat prior to commit 0f8d4c3 contains a path traversal vulnerability in skill file handling that allows attackers to write arbitrary files to the clien… |
CVE-2026-28412 | Medium | 6.5 | 2026-03-02 | Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server imposes no limit on concurrent connections. Combined w… |
CVE-2026-28403 | High | 7.6 | 2026-03-02 | Textream is a free macOS teleprompter app. Prior to version 1.5.1, the `DirectorServer` WebSocket server (`ws://127.0.0.1:<httpPort+1>`) accepts connections fr… |