Codewithcj vulnerabilities
Products
Newest
- codewithcj sparkyfitness SparkyFitness before 0.17.0 Missing Authorization via food-variants DELETE Endpoint 5.3 Medium
- codewithcj sparkyfitness SparkyFitness: SSRF via unvalidated custom_url in AI service settings 5.4 Medium
- codewithcj sparkyfitness SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore 7.2 High
- codewithcj sparkyfitness SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output. 6.1 Medium