agentprime: erudika-scooldEvery new CVE for erudika-scoold.https://agentprime.io/CVE-2026-57183: Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logshttps://agentprime.io/advisories/CVE-2026-57183/https://agentprime.io/advisories/CVE-2026-57183/CVSS 6.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:32:47 GMTCVECVE-2026-55840: Scoold: Open Redirect in getBackToUrl() allows phishing via domain-prefix startsWith bypasshttps://agentprime.io/advisories/CVE-2026-55840/https://agentprime.io/advisories/CVE-2026-55840/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:31:57 GMTCVECVE-2026-55842: Scoold: CORS wildcard origin with credentials enabled allows cross-origin authenticated API access from any domainhttps://agentprime.io/advisories/CVE-2026-55842/https://agentprime.io/advisories/CVE-2026-55842/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:30:57 GMTCVECVE-2026-54676: Scoold: GET /api/posts/{id}/answers leaks private-space replies when personal API tokens are enabledhttps://agentprime.io/advisories/CVE-2026-54676/https://agentprime.io/advisories/CVE-2026-54676/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 17:15:06 GMTCVECVE-2026-54677: Scoold: Authenticated user can post replies and comments to private-space questions without space membershiphttps://agentprime.io/advisories/CVE-2026-54677/https://agentprime.io/advisories/CVE-2026-54677/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 17 Sep 2026 17:14:12 GMTCVECVE-2026-42176: Scoold: Persistent Admin Takeover by Overwriting the admins Configuration Setting via Forged JWT (missing `jti` validation)https://agentprime.io/advisories/CVE-2026-42176/https://agentprime.io/advisories/CVE-2026-42176/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 19:16:35 GMTCVECVE-2026-39354: Scoold has an Authenticated Arbitrary Question Overwrite via Client-Controlled postId in POST /questions/askhttps://agentprime.io/advisories/CVE-2026-39354/https://agentprime.io/advisories/CVE-2026-39354/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 18:54:36 GMTCVECVE-2026-34832: Scoold: Cross-Account Feedback Deletion (IDOR)https://agentprime.io/advisories/CVE-2026-34832/https://agentprime.io/advisories/CVE-2026-34832/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 19:08:03 GMTCVECVE-2024-50334: Semicolon Path Injection on API /api;/confighttps://agentprime.io/advisories/CVE-2024-50334/https://agentprime.io/advisories/CVE-2024-50334/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2024 14:36:13 GMTCVECVE-2022-1543: Improper handling of Length parameter in erudika/scooldhttps://agentprime.io/advisories/CVE-2022-1543/https://agentprime.io/advisories/CVE-2022-1543/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 29 Apr 2022 18:10:09 GMTCVEcritical