YosemiteCrew vulnerabilities
We track 1 vulnerability in YosemiteCrew products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
1vulnerabilities
0critical
1high
0exploited
8.3average CVSS score
Latest YosemiteCrew vulnerabilities
- 8.3 High severity
Yosemite-Crew: Authorization Bypass Through User-Controlled Key
YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. `authorizeCognito` in `apps/backe