CVE-2026-91774 Blast Radius

MEDIUM • CVSS 4.3Yao through v1.0.0-rc22 authenticates but fails to authorize the GET /user/teams/:id endpoint, allowing any logged-in user to read full team records. …

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-91774.

Book a Demo →← Back to CVE-2026-91774