trudesk vulnerabilities

CVEs whose affected-version data names the trudesk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111345Medium· 4.3

yesterday

Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id

Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private conversations by supplying another conversation's id. Attackers can request GET /api/v1/messages/conversation/:id, w…

▾ Sunlitpolonel · trudeskvia CVEORG