Repository navigation
Security: IgnisDa/ryot
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Cross-user access-link revocation via `revokeAccessLink`GHSA-9cwp-c4f6-rh6m published
Nov 1, 2026 by IgnisDaLow -
Cross-tenant collection content deletion via `deployRemoveEntitiesFromCollectionJob`GHSA-qwh4-gwr7-95x8 published
Nov 1, 2026 by IgnisDaModerate -
Cross-tenant collection read via `collectionContents`GHSA-pv32-9hxm-ph4v published
Nov 1, 2026 by IgnisDaModerate -
Cross-tenant collection takeover via `createOrUpdateCollection`GHSA-9v6w-g6x6-p4m5 published
Nov 1, 2026 by IgnisDaHigh -
Unauthenticated registration mass-assignment allows self-promotion to administrator and takeover of arbitrary accounts in ryotGHSA-8m64-3w7v-9wfq published
Oct 3, 2026 by IgnisDaCritical -
Cross-user BOLA: userWorkoutTemplateDetails reads any user's private workout template by idGHSA-v2m5-469g-hjqw published
Oct 3, 2026 by IgnisDaLow -
Ryot: Unauthenticated access to S3 file-storage GraphQL operationsGHSA-vxfm-87m3-9vh9 published
Sep 24, 2026 by IgnisDaHigh -
Ryot: `createOrUpdateUserIntegration` trusts a client-supplied `integrationId` with no ownership check, letting any user hijack/overwrite another user's integration (cross-tenant IDOR)GHSA-cjxv-jj8g-vfvj published
Jul 13, 2026 by IgnisDaModerate
Learn more about advisories related to IgnisDa/ryot in the GitHub Advisory Database