fossasia

Products

ProductCVEsExploitedLatest
open-event-server2–Jul 17, 2026
eventyay-exhibition1–Nov 5, 2026
susi_server1–Apr 30, 2021

Exploited and recent CVEs

  • CVE-2026-122325 Low 3.1 eventyay-exhibition through commit f68888e Cross-Event Attendee Data Disclosure via Lead Creation API 0.2%
  • CVE-2026-63101 High 7.5 Open Event Server 1.19.1 Unauthenticated Member Roster Export via CSV Export Endpoint 0.5%
  • CVE-2025-5323 Low 3.7 fossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of security-relevant inputs without integrity checking 0.1%
  • CVE-2020-4039 High 8.6 Directory Traversal Vulnerability in SUSI.AI Server 1.4%