CyberSecBulletin

Frain-dev vulnerabilities

We track 1 vulnerability in Frain-dev products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Frain-dev vulnerabilities

  • 7.1 High severity

    convoy: Authorization Bypass Through User-Controlled Key

    CVE-2026-81505Frain-dev

    Convoy is a cloud native webhooks gateway. Prior to 26.6.8, Convoy's GET /api/v1/projects/{projectID}/sources/{sourceID} endpoint authorizes access to the project in the URL, but Handler.GetSource calls sources.Service.FindSourceByID() and fetches the Source o