CVE-2026-89112Medium 6.5Broken Access Control in CLA-Assistant � CLA Signature PII Disclosure0.2%
CVE-2023-39438High 8.1Missing Authorization check allows certain operations on CLA Assistant data0.5%
CVE-2022-29617UnratedDue to improper error handling an authenticated user can crash CLA assistant instance. This could impact the availability of the application.0.9%
CVE-2021-21471Medium 6.5In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity 0.7%