agentprime: lukevella-ralllyEvery new CVE for lukevella-rallly.https://agentprime.io/CVE-2026-92565: Rallly before 4.15.0 Information Disclosure via polls.gethttps://agentprime.io/advisories/CVE-2026-92565/https://agentprime.io/advisories/CVE-2026-92565/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 14:40:45 GMTCVECVE-2026-6493: lukevella rallly Reset Password reset-password-form.tsx cross site scriptinghttps://agentprime.io/advisories/CVE-2026-6493/https://agentprime.io/advisories/CVE-2026-6493/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Apr 2026 14:15:15 GMTCVECVE-2025-66027: Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settingshttps://agentprime.io/advisories/CVE-2025-66027/https://agentprime.io/advisories/CVE-2025-66027/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Nov 2025 00:43:02 GMTCVECVE-2025-65034: Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollIdhttps://agentprime.io/advisories/CVE-2025-65034/https://agentprime.io/advisories/CVE-2025-65034/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:26:59 GMTCVECVE-2025-65033: Rallly Broken Authorization: Any User Can Pause or Resume Any Poll via Poll ID Manipulationhttps://agentprime.io/advisories/CVE-2025-65033/https://agentprime.io/advisories/CVE-2025-65033/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:26:44 GMTCVECVE-2025-65032: Rallly Has an IDOR Vulnerability in Participant Rename Function Allows Unauthorized Modification of Other Users’ Nameshttps://agentprime.io/advisories/CVE-2025-65032/https://agentprime.io/advisories/CVE-2025-65032/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:26:09 GMTCVECVE-2025-65031: Rallly Improper Authorization in Comment Endpoint Allows User Impersonationhttps://agentprime.io/advisories/CVE-2025-65031/https://agentprime.io/advisories/CVE-2025-65031/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:25:49 GMTCVECVE-2025-65030: Rallly Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removalhttps://agentprime.io/advisories/CVE-2025-65030/https://agentprime.io/advisories/CVE-2025-65030/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:25:16 GMTCVECVE-2025-65029: Rallly Has an IDOR Vulnerability in Participant Deletion Endpoint Allows Unauthorized Removal of Poll Participantshttps://agentprime.io/advisories/CVE-2025-65029/https://agentprime.io/advisories/CVE-2025-65029/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:24:45 GMTCVECVE-2025-65021: Rallly Has Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)https://agentprime.io/advisories/CVE-2025-65021/https://agentprime.io/advisories/CVE-2025-65021/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:24:31 GMTCVEcriticalCVE-2025-65020: Rallly Has Unauthorized Poll Duplication via Insecure Direct Object Reference (IDOR)https://agentprime.io/advisories/CVE-2025-65020/https://agentprime.io/advisories/CVE-2025-65020/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:24:12 GMTCVECVE-2025-65028: Rallly Has an IDOR Vulnerability in Vote Update Endpoint Allows Unauthorized Manipulation of Participant Voteshttps://agentprime.io/advisories/CVE-2025-65028/https://agentprime.io/advisories/CVE-2025-65028/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Nov 2025 17:23:57 GMTCVECVE-2025-47781: Rallly Insufficient Password Login Token Entropy Leads to Account Takeoverhttps://agentprime.io/advisories/CVE-2025-47781/https://agentprime.io/advisories/CVE-2025-47781/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 May 2025 15:52:13 GMTCVEcritical