kitchenowl vulnerabilities

CVEs whose affected-version data names the kitchenowl package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-101033Medium· 4.3

today

KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations

KitchenOwl through 0.7.10 fails to verify that category IDs belong to the caller's household in expense and item operations. Authenticated attackers can enumerate category IDs from other households to read their category names, budgets, …

▾ SunlitTomBursch · kitchenowlvia NVD