Vastsa vulnerabilities
We track 2 vulnerabilities in Vastsa products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 30, 2026.
2vulnerabilities
0critical
2high
0exploited
7.4average CVSS score
Latest Vastsa vulnerabilities
- 7.3 High severity
FileCodeBox: Concurrent Execution using Shared Resource with Improper Synchronization
A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update_file_usage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to
- 7.5 High severity
FileCodeBox: Use of Less Trusted Source
FileCodeBox before 2.4 contains a rate-limit bypass vulnerability in the IPRateLimit class that allows unauthenticated attackers to circumvent request throttling by supplying attacker-controlled X-Real-IP and X-Forwarded-For headers without verification of tru