Advisories · Technology

coopcycle-web.

Every CVE that names coopcycle-web among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121620 CVE record

CVSS 8.3 High

CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification
- coopcycle-web
- CWE-345
Not analysed yet 4 Nov 2026
CVE-2026-121945 CVE record

CVSS 7.2 High

CoopCycle coopcycle-web before 6.20.1 IDOR via Incident Resource and Action Endpoint
- coopcycle-web
- Broken access control
Not analysed yet 4 Nov 2026