BlueWave Checkmate

• CVE-2025-48024 Medium 5.0 In BlueWave Checkmate before 2.1, an authenticated regular user can access sensitive application secrets via the /api/v1/settings endpoint. 0.4%
• CVE-2025-47817 High 8.8 In BlueWave Checkmate through 2.0.2 before b387eba, a profile edit request can include a role parameter. 0.5%
• CVE-2025-47245 High 8.1 In BlueWave Checkmate through 2.0.2 before d4a6072, an invite request can be modified to specify a privileged role. 0.5%