Yosemite-Crew vulnerabilities

1 known vulnerability in Yosemite-Crew from YosemiteCrew. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  Yosemite-Crew: Authorization Bypass Through User-Controlled Key

  CVE-2026-59979Oct 28, 2026YosemiteCrew

  YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. `authorizeCognito` in `apps/backe