roncoo-education vulnerabilities

CVEs whose affected-version data names the roncoo-education package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111611Medium· 5.4

yesterday

roncoo-education through 25.0.0-RELEASE IDOR via Order Pay Cancel and Continue Endpoints

roncoo-education through 25.0.0-RELEASE contains an insecure direct object reference vulnerability that allows authenticated users to cancel or continue payment on other users' orders. Attackers can supply another user's order number to …

▾ Sunlitroncoo · roncoo-educationvia CVEORG