David-Crty Databasement

• CVE-2026-121939 High 8.1 Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking 0.5%
• CVE-2026-111875 Medium 4.7 David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization 0.2%
• CVE-2026-108963 High 8.8 databasement before 1.8.2 allows remote code execution because it runs certain commands (e.g., mariadb-dump) with a database name that can be specified by any authenticated user. For example, --result 1.7%
• CVE-2026-103534 Medium 6.3 David-Crty databasement Snapshot Model snapshots SnapshotPolicy.view access control 0.3%
• CVE-2026-103533 Medium 4.1 David-Crty databasement database-servers API Endpoint RestoreRequest.php 511 path traversal 0.3%
• CVE-2026-95654 High 7.4 Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token 0.5%