| Package | Affected versions | Patched versions |
|---|---|---|
| invenio | ≤ 0.92.1 |
CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free