YosemiteCrew vulnerabilities

Products

• Yosemite-Crew 1

Latest YosemiteCrew CVEs

Newest publication first

1. CVE-2026-59979 YosemiteCrew: Missing organization authorization on service and PMS library/template routes

   Published 2026-10-28

   High·CVSS 8.3 EPSS 0.30%

   YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. authorizeCognito in apps/backend/src/middlewares/auth...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.