alf.io vulnerabilities

CVEs whose affected-version data names the alf.io package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-50165High· 7.1

2w ago

alf.io has Improper Access Control for Organization Owners that Exposes System Secrets

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. An Improper Access Control issue in versions prior to 2.0-M5-2605 allows an organization owner to read system-level configuration se…

▾ Twilightalfio-event · alf.ioEPSS 0.21%via CVEORG