bootimus vulnerabilities

1 known vulnerability in bootimus from Garybowers. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  bootimus: Missing Authorization

  CVE-2026-56115Jun 23, 2026Garybowers

  Bootimus through 0.1.70 contains a broken access control vulnerability that allows authenticated low-privileged users to perform administrative actions by exploiting missing role enforcement in the JWTMiddleware function in internal/auth/auth.go, which validat