All products

github.com/mayswind/ezbookkeeping

Go · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
ezBookkeeping: Source-IP allowlist (MCP & API token) is bypassable via a spoofed `X-Forwarded-For` headerCVE-2026-86041 · GHSA-WCHH-MRV2-5H4Q github.com/mayswind/ezbookkeeping Go Medium Fix reported
MaysWind ezBookkeeping has Improper Privilege ManagementCVE-2024-57604 · GHSA-MPG8-8X9C-P9GVVersion ranges need review. github.com/mayswind/ezbookkeeping Go Critical No fix reported
Missing rate limit in MaysWind ezBookkeepingCVE-2024-57603 · GHSA-772M-773G-QMHCVersion ranges need review. github.com/mayswind/ezbookkeeping Go Medium No fix reported