agentprime: leepeuker-movaryEvery new CVE for leepeuker-movary.https://agentprime.io/CVE-2026-40350: Movary User Management (/settings/users) has Authorization Bypass that Allows Low-Privileged Users to Enumerate All Users and Create Administrator Accountshttps://agentprime.io/advisories/CVE-2026-40350/https://agentprime.io/advisories/CVE-2026-40350/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 Apr 2026 00:07:33 GMTCVECVE-2026-40349: Authenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=truehttps://agentprime.io/advisories/CVE-2026-40349/https://agentprime.io/advisories/CVE-2026-40349/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 Apr 2026 00:05:46 GMTCVECVE-2026-40348: Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probinghttps://agentprime.io/advisories/CVE-2026-40348/https://agentprime.io/advisories/CVE-2026-40348/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 18 Apr 2026 00:01:09 GMTCVECVE-2026-23841: Movary vulnerable to Cross-site Scripting with `?categoryCreated=` paramhttps://agentprime.io/advisories/CVE-2026-23841/https://agentprime.io/advisories/CVE-2026-23841/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Jan 2026 18:35:21 GMTCVEcriticalCVE-2026-23840: Movary vulnerable to Cross-site Scripting with `?categoryDeleted=` paramhttps://agentprime.io/advisories/CVE-2026-23840/https://agentprime.io/advisories/CVE-2026-23840/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Jan 2026 18:32:50 GMTCVEcriticalCVE-2026-23839: Movary vulnerable to Cross-site Scripting with `?categoryUpdated=` paramhttps://agentprime.io/advisories/CVE-2026-23839/https://agentprime.io/advisories/CVE-2026-23839/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Jan 2026 18:27:25 GMTCVEcriticalCVE-2025-64115: Movary unvalidated Referer header allows open redirect and phishinghttps://agentprime.io/advisories/CVE-2025-64115/https://agentprime.io/advisories/CVE-2025-64115/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 17:39:19 GMTCVECVE-2025-64116: Movary vulnerable to an open redirecthttps://agentprime.io/advisories/CVE-2025-64116/https://agentprime.io/advisories/CVE-2025-64116/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Oct 2025 17:32:41 GMTCVE