Security: jhuckaby/Cronicle
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of GHSA-5j3v-cq96-xw6vGHSA-9xpg-9w3g-mpwj published
Jun 19, 2026 by jhuckabyHigh -
Stored XSS in admin Activity Log via account full_name fieldGHSA-vh39-3pcm-2j63 published
Jun 13, 2026 by jhuckabyCritical -
Privilege Escalation via update_event Job Output in CronicleGHSA-5j3v-cq96-xw6v published
Apr 3, 2026 by jhuckabyModerate -
Stored XSS via Job HTML/Table Output in CronicleGHSA-36q6-pwxv-j545 published
Apr 3, 2026 by jhuckabyHigh