Decoy vulnerabilities

CVEs whose affected-version data names the Decoy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116471Medium· 4.3

today

BKWLD Decoy Authorization Policy Policy.php privileges management

A security flaw has been discovered in BKWLD Decoy up to 5.11.1. The impacted element is an unknown function of the file Policy.php of the component Authorization Policy. The manipulation of the argument role results in improper privileg…

▾ SunlitBKWLD · Decoyvia CVEORG