john-broadway vulnerabilities

Products

• pacioli 1

Latest john-broadway CVEs

Newest publication first

1. CVE-2026-107841 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

   Published 2026-10-09

   Medium·CVSS 5.7 EPSS 0.23%

   pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent established by an enclosing governed act without c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.