Oss-Apps

2 CVEs in 1 Oss-Apps product, including Splitpro. Newest: CVE-2026-122324 (2026-11-05). Severity, EPSS and public exploits for each.

Oss-Apps products with known CVEs

ProductCVEs
Splitpro2
Oss-Apps CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-122324Low3.12026-11-05SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users' expenses by supplying arbitrary expe…
CVE-2026-122317Medium4.32026-11-05SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any account's details by supplying arbitrary…