3xpyth0n vulnerabilities
We track 2 vulnerabilities in 3xpyth0n products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2026.
2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score
Latest 3xpyth0n vulnerabilities
- 8.7 High severity
ideon: Improper Authorization
ideon is a self-hosted visual workspace. Prior to version 0.9.4, several project mutation endpoints under /api/projects/[id]/* resolve the caller's project role but never enforce it, so a user who was granted only the read-only viewer role on a project can per
- 7.1 High severity
ideon: Server-Side Request Forgery
ideon is a self-hosted visual workspace. Prior to version 0.9.6, the SSRF protection in safeFetch is bypassed by IPv6 transition addresses that embed private IPv4 addresses. The isPrivateIP function in src/app/lib/ssrf.ts checks only a narrow set of IPv6 range