Munshi vulnerabilities

2 known vulnerabilities in Munshi from Petpooja. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Munshi: Missing Authorization

  CVE-2026-119733Nov 2, 2026Petpooja

  Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in its company deletion workflow at DELETE /api/companies/{company_id}, where the application fails to enforce the dedicated company_delete permission or verify company owne

• 7.5 High severity

  Munshi: Missing Authentication for Critical Functionality

  CVE-2026-119731Nov 2, 2026Petpooja

  Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST /api/payment/order/webhook, which lacks webhook authentication, cryptographic signature verification, source validation, and independent