Part-DB-server vulnerabilities

2 known vulnerabilities in Part-DB-server from Part-DB. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Part-DB-server: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2026-86055Oct 23, 2026Part-DB

  Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to a user from the client-supplied HTTP Host header, with no trusted-host validation.

• 9.6 Critical severity

  Part-DB-server: Unrestricted Upload of File with Dangerous Type

  CVE-2026-54630Oct 23, 2026Part-DB

  Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extension, and its extension