CVE-2026-50886緊急 9.1Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a…
GHSA-6jq6-x4cx-qvcm中Firefly II has Stored XSS in Audit Log Entry view via piggy bank name (ale.twig)
GHSA-5q8v-j673-m5v4中Firefly III user API endpoints expose all users' information to any authenticated user (IDOR)
CVE-2024-37893中 5.9Firefly III is a free and open source personal finance manager. In affected versions an MFA bypass in the Firefly III OAuth flow may allow m…