CVE-2026-121729 - emailflare before commit cf31f33 Missing Authorization via /api/keys Routes
CVE ID :CVE-2026-121729 Published : Nov. 3, 2026, 10:55 p.m. | 9 minutes ago Description :emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers...