lukevella vulnerabilities

CVEs per yearBy the year they were published

1. 202511
2. 20262

Newest CVEs

• CVE-2026-92565

  Rallly before 4.15.0 Information Disclosure via polls.get

  lukevella · rallly

  Medium6.9
• CVE-2026-6493

  lukevella rallly Reset Password reset-password-form.tsx cross site scripting

  lukevella · rallly

  Medium5.1
• CVE-2025-66027

  Rallly Information Disclosure Vulnerability in Participant API Leaks Names and Emails Despite Pro Privacy Settings

  lukevella · rallly

  High7.1
• CVE-2025-65034

  Rallly Improper Authorization Allows Reopening of Any Finalized Poll via Public pollId

  lukevella · rallly

  High8.1
• CVE-2025-65033

  Rallly Broken Authorization: Any User Can Pause or Resume Any Poll via Poll ID Manipulation

  lukevella · rallly

  High8.1
• CVE-2025-65032

  Rallly Has an IDOR Vulnerability in Participant Rename Function Allows Unauthorized Modification of Other Users’ Names

  lukevella · rallly

  Medium6.5
• CVE-2025-65031

  Rallly Improper Authorization in Comment Endpoint Allows User Impersonation

  lukevella · rallly

  Medium6.5
• CVE-2025-65030

  Rallly Improper Authorization in Comment Deletion Endpoint Allows Unauthorized Comment Removal

  lukevella · rallly

  High7.1
• CVE-2025-65029

  Rallly Has an IDOR Vulnerability in Participant Deletion Endpoint Allows Unauthorized Removal of Poll Participants

  lukevella · rallly

  High8.1
• CVE-2025-65021

  Rallly Has Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR)

  lukevella · rallly

  Critical9.1