agentprime: polarnl-polarlearnEvery new CVE for polarnl-polarlearn.https://agentprime.io/CVE-2026-39322: PolarLearn: Any password authenticates banned accounts and grants API accesshttps://agentprime.io/advisories/CVE-2026-39322/https://agentprime.io/advisories/CVE-2026-39322/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 19:03:28 GMTCVEcriticalCVE-2026-35610: PolarLearn has a Server Action Admin Bypass in Account Management Actionshttps://agentprime.io/advisories/CVE-2026-35610/https://agentprime.io/advisories/CVE-2026-35610/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 16:56:57 GMTCVECVE-2026-25885: PolarLearn allows Unauthenticated WebSocket access allows subscribing to and posting in arbitrary group chatshttps://agentprime.io/advisories/CVE-2026-25885/https://agentprime.io/advisories/CVE-2026-25885/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 21:15:33 GMTCVEcriticalCVE-2026-25222: PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpointhttps://agentprime.io/advisories/CVE-2026-25222/https://agentprime.io/advisories/CVE-2026-25222/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 23:01:02 GMTCVECVE-2026-25221: PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google)https://agentprime.io/advisories/CVE-2026-25221/https://agentprime.io/advisories/CVE-2026-25221/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Feb 2026 22:59:38 GMTCVECVE-2026-25126: PolarLearn's unvalidated vote direction allows vote count manipulationhttps://agentprime.io/advisories/CVE-2026-25126/https://agentprime.io/advisories/CVE-2026-25126/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Jan 2026 22:06:37 GMTCVE