LoginMissing authorization in the OpenAI thread/message API endpoints of GROWI
16 March 2026 at 06:00
GROWI provided by GROWI, Inc. contains a missing authorization vulnerability in the OpenAI thread/message API endpoints.
Normal view
Received — 16 March 2026
⏭
JVNRSS Feed - Update Entry
-
JVNRSS Feed - Update Entry
- Missing authorization in the OpenAI thread/message API endpoints of GROWI
-
OpenLiteSpeed and LSWS Enterprise vulnerable to OS command injection
16 March 2026 at 04:00
OpenLiteSpeed and LSWS Enterprise provided by LiteSpeed Technologies contain an OS command injection vulnerability.
