Databasus vulnerabilities
We track 1 vulnerability in Databasus products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Databasus vulnerabilities
- 8.1 High severity
databasus: Improper Restriction of Excessive Authentication Attempts
Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/users/reset-password. Attackers can request a six-digit code for a known email, then guess