agentprime: openreplayEvery new CVE for openreplay.https://agentprime.io/CVE-2026-57230: OpenReplay: Authenticated ClickHouse SQL injection via session searchhttps://agentprime.io/advisories/CVE-2026-57230/https://agentprime.io/advisories/CVE-2026-57230/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:47:31 GMTCVECVE-2026-55881: OpenReplay: Cross-tenant session replay disclosure via missing session ownership check in first-mob endpointhttps://agentprime.io/advisories/CVE-2026-55881/https://agentprime.io/advisories/CVE-2026-55881/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:44:15 GMTCVECVE-2026-55880: OpenReplay: Cross-user IDOR in notes and dashboard widgetshttps://agentprime.io/advisories/CVE-2026-55880/https://agentprime.io/advisories/CVE-2026-55880/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:42:15 GMTCVECVE-2026-55879: OpenReplay: Unauthenticated stored XSS leads to dashboard account takeoverhttps://agentprime.io/advisories/CVE-2026-55879/https://agentprime.io/advisories/CVE-2026-55879/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 20:39:44 GMTCVEcriticalCVE-2026-45296: OpenReplay: Cross-tenant information disclosure in app_apikey projectKey routes via missing tenant bindinghttps://agentprime.io/advisories/CVE-2026-45296/https://agentprime.io/advisories/CVE-2026-45296/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 16:51:47 GMTCVECVE-2026-45297: Cross-tenant IDOR on feature-flag and assist-stats routes via {project_id} case mismatchhttps://agentprime.io/advisories/CVE-2026-45297/https://agentprime.io/advisories/CVE-2026-45297/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 May 2026 16:50:38 GMTCVECVE-2026-28443: OpenReplay: SQL injection in cards/search via unvalidated sort field parameterhttps://agentprime.io/advisories/CVE-2026-28443/https://agentprime.io/advisories/CVE-2026-28443/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Mar 2026 20:53:17 GMTCVECVE-2023-48226: OpenReplay HTML Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2023-48226/https://agentprime.io/advisories/CVE-2023-48226/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Nov 2023 19:37:57 GMTCVE