Skip to contentPraskla-technology Assessment-placipy vulnerabilities
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy Admin Privilege Escalation via Trusted JWT ClaimsCVE-2026-258759.3 Critical
- prasklatechnology placipy, praskla-technology assessment-placipy +1 moreNoSQL Injection Risk via Unsanitized Query ParametersCVE-2026-258149.3 Critical
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy Exposes Sensitive Data via Application LogsCVE-2026-258138.7 High
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy is Missing CSRF Protection on State-Changing EndpointsCVE-2026-258129.3 Critical
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy Email Domain Trust Enables Cross-Tenant Data Access (Multi-Tenant Isolation Failure)CVE-2026-258115.3 Medium
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy Code Execution Allowed Without Assessment Active State ValidationCVE-2026-258095.3 Medium
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy has Missing Authorization Checks on Student Management Endpoints (IDOR)CVE-2026-258065.3 Medium
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy is Missing Object-Level Authorization in student.submission.routes.tsCVE-2026-258105.3 Medium
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy is Missing Authorization on Assessment Results EndpointCVE-2026-258765.3 Medium
- prasklatechnology placipy, praskla-technology assessment-placipy +1 morePlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover)CVE-2026-257539.3 Critical