tag
Cwe-639
High
Langflow Responses API IDOR — Execute Another User's Flow (CVE-2026-55255)
CVE-2026-55255 (GHSA-qrpv-q767-xqq2)·
Langflow — open-source platform for building and deploying AI-powered agents and workflows (langflow-ai/langflow), OpenAI-compatible Responses API
patched
Critical
WordPress Service Finder Bookings ≤ 6.0 Authentication Bypass via `original_user_id` Cookie (CVE-2025-5947)
CVE-2025-5947·
WordPress plugin "Service Finder Bookings" (sf-booking)
unpatched
High
Saleor GraphQL IDOR — Unauthenticated Order PII Exfiltration (CVE-2026-24136)
CVE-2026-24136·
Saleor e-commerce platform (GraphQL API)
patched