prospero_flow_crm vulnerabilities

CVEs whose affected-version data names the prospero_flow_crm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114519High· 8.6

yesterday

Missing authorization in the Prospero Flow CRM user API allows a basic role user to read and delete other accounts

Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with a basic role to read the accounts of other users of its own company, including accounts with higher privileges, and, …

▾ TwilightRoskus · Prospero Flow CRMvia CVEORG