paopao-ce vulnerabilities

CVEs whose affected-version data names the paopao-ce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111649Medium· 6.5

yesterday

Rocboss paopao-ce through 0.6.0-alpha.3 IDOR via DownloadAttachment Endpoint

Rocboss paopao-ce through 0.6.0-alpha.3 contains an insecure direct object reference vulnerability in DownloadAttachment that allows authenticated users to access private media by supplying arbitrary content IDs. Attackers can enumerate …

▾ Sunlitrocboss · paopao-cevia CVEORG