agentprime: lenve-vhrEvery new CVE for lenve-vhr.https://agentprime.io/CVE-2026-110217: vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrshttps://agentprime.io/advisories/CVE-2026-110217/https://agentprime.io/advisories/CVE-2026-110217/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:50:05 GMTCVECVE-2026-90501: lenve vhr HrMapper.xml HrInfoController.updateHr privileges managementhttps://agentprime.io/advisories/CVE-2026-90501/https://agentprime.io/advisories/CVE-2026-90501/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 08:00:10 GMTCVECVE-2026-90500: lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted uploadhttps://agentprime.io/advisories/CVE-2026-90500/https://agentprime.io/advisories/CVE-2026-90500/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 07:45:11 GMTCVECVE-2026-90499: lenve vhr Password Update pass HrInfoController.updatePass improper authorizationhttps://agentprime.io/advisories/CVE-2026-90499/https://agentprime.io/advisories/CVE-2026-90499/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 06:45:11 GMTCVECVE-2026-90498: lenve vhr vhr.sql default credentialshttps://agentprime.io/advisories/CVE-2026-90498/https://agentprime.io/advisories/CVE-2026-90498/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 06:15:16 GMTCVECVE-2026-90490: lenve vhr MailReceiver deserializationhttps://agentprime.io/advisories/CVE-2026-90490/https://agentprime.io/advisories/CVE-2026-90490/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 13 Sep 2026 00:45:17 GMTCVECVE-2026-85214: vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwritehttps://agentprime.io/advisories/CVE-2026-85214/https://agentprime.io/advisories/CVE-2026-85214/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:12:24 GMTCVECVE-2026-85182: vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Changehttps://agentprime.io/advisories/CVE-2026-85182/https://agentprime.io/advisories/CVE-2026-85182/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 03 Sep 2026 14:12:20 GMTCVE