ByteOS Network

NVD Vulnerability Details :

CVE-2026-47716

Received

Source-security-advisories@github.com

Published At-26 May, 2026 | 17:16

Updated At-26 May, 2026 | 17:16

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the submitted issue IDs without also requiring those issues to belong to that project. This vulnerability is fixed in 2.2.0.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	3.1	LOW	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Type: Secondary

Version: 3.1

Base score: 3.1

Base severity: LOW

Vector:

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Weaknesses

CWE ID	Type	Source
CWE-639	Primary	security-advisories@github.com

CWE ID: CWE-639

Type: Primary

Source: security-advisories@github.com

References

Hyperlink	Source	Resource
https://github.com/bugsink/bugsink/releases/tag/2.2.0	security-advisories@github.com	N/A
https://github.com/bugsink/bugsink/security/advisories/GHSA-g5vc-q7qc-v939	security-advisories@github.com	N/A

Hyperlink: https://github.com/bugsink/bugsink/releases/tag/2.2.0

Source: security-advisories@github.com

Resource: N/A

Hyperlink: https://github.com/bugsink/bugsink/security/advisories/GHSA-g5vc-q7qc-v939

Source: security-advisories@github.com

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History