Roostorg vulnerabilities
We track 2 vulnerabilities in Roostorg products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Roostorg vulnerabilities
- 7.4 High severity
coop: Improper Authentication
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, the SAML strategy's verify callback resolved the authenticated user by email alone using `kyselyUserFindByEmail`, without binding the lookup to the organization in `/saml/login/:orgI
- 8.7 High severity
coop: Missing Authentication for Critical Functionality
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.0, an unauthenticated actor can query `Query.allOrgs` through `/api/v1/graphql` on a publicly accessible deployment and obtain data for all organizations, including organization IDs, na