Rochacbruno vulnerabilities
We track 2 vulnerabilities in Rochacbruno products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Rochacbruno vulnerabilities
- 7.5 High severity
marmite: Missing Authentication for Critical Functionality
Marmite through 0.4.2 contains missing authentication in the development server endpoints /__marmite__/content, /__marmite__/config, and /__marmite__/file/, allowing unauthenticated attackers to create, modify, and overwrite site content and configuration. Att
- 7.5 High severity
marmite: Improper Limitation of a Pathname to a Restricted Directory
Marmite through 0.4.2 contains a path traversal vulnerability in the development server started by --serve that allows unauthenticated attackers to read arbitrary files. The handle_request function in src/server.rs fails to reject .. segments after percent-dec