logchimp vulnerabilities

Products

• logchimp/logchimp 1

Latest logchimp CVEs

Newest publication first

1. CVE-2026-121560 LogChimp before 0.9.3 Authorization Bypass via PATCH /api/v1/posts

   Published 2026-11-03

   High·CVSS 7.1

   LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated post authors to modify any other post by supplying mismatched postId and id body parameters. Attackers can set postId to their own post and id to an enumerated victim post...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.