L429609201 vulnerabilities
We track 2 vulnerabilities in L429609201 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest L429609201 vulnerabilities
- 7.3 High severity
misaka_danmu_server: Missing Authentication for Critical Functionality
Misaka Danmu Server through 2.8.9 contains a missing authentication vulnerability that allows unauthenticated attackers to access audit, diagnostics, data-check, scan-index and health routes under /api/ui lacking the get_current_user dependency. Attackers can
- 9.8 Critical severity
misaka_danmu_server: Missing Authentication for Critical Functionality
Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to write arbitrary configuration keys via the unprotected POST /api/ui/config-history/rollback endpoint. Attackers can set the ipWhitelist k