LingGuo-Drama vulnerabilities

CVEs whose affected-version data names the LingGuo-Drama package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

2 CVEsRSS

CVE-2026-111723High· 8.8

yesterday

LingGuo-Drama through commit 8a6924a Broken Access Control via /admin/v1/admins API

LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to manage all accounts through the /admin/v1/admins API protected only by AuthAdminJWT. Attackers can self-register, read…

▾ TwilightLingGuoAI · LingGuo-Dramavia CVEORG

CVE-2026-111722High· 8.1PoC

yesterday

LingGuo-Drama through commit 8a6924a IDOR via /admin/v1/projects/:id API

LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered users to access other users' projects because projects.Get lacks an owner check. Self-registered attackers can iterate…

▾ MidnightLingGuoAI · LingGuo-Dramavia CVEORG