PT-2026-43306 · Bugsink · Bugsink

Published 2026-05-26 · Updated 2026-05-26 · CVE-2026-47716

Mitre

CVSS v3.1

3.1

Low

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but applies the requested bulk action to the submitted issue IDs without also requiring those issues to belong to that project. This vulnerability is fixed in 2.2.0.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-47716

Affected Products

Bugsink

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-47716 · Security Note
• https://github.com/bugsink/bugsink/security/advisories/GHSA-g5vc-q7qc-v939 · Note
• https://github.com/bugsink/bugsink/releases/tag/2.2.0 · Note