Tbed vulnerabilities

CVEs whose affected-version data names the Tbed package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111674Medium· 4.3

yesterday

Tbed through 20240319 Missing Authorization via setImgFileName Endpoint

Tbed through 20240319 contains a missing authorization vulnerability that allows any authenticated user to rename other users' images through the /admin/setImgFileName endpoint. Attackers can supply a victim's imgname, exposed in public …

▾ SunlitHello-hao · Tbedvia CVEORG