SuggestArr vulnerabilities

CVEs whose affected-version data names the SuggestArr package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-113703Critical· 9.3PoC

yesterday

SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing

SuggestArr before 3.0.0 contains an authentication bypass vulnerability in its local_bypass authentication mode where enforce_authentication() in api_service/auth/middleware.py trusts the client-controlled request.remote_addr value, whic…

▾ Abyssalgiuseppe99barchetta · SuggestArrvia CVEORG