Talelin
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Talelin product.
RSS Feeds for Talelin security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Talelin products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Talelin Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 4 vulnerabilities in Talelin with an average score of 6.8 out of ten. Last year, in 2025 Talelin had 1 security vulnerability published. That is, 3 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 3.05.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 4 | 6.75 |
| 2025 | 1 | 3.70 |
| 2024 | 1 | 7.50 |
| 2023 | 0 | 0.00 |
| 2022 | 1 | 7.50 |
| 2021 | 3 | 0.00 |
It may take a day or so for new Talelin vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Talelin Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-96882 | Sep 24, 2026 |
Improper Authorization in TaleLin lin-cms-spring-boot 0.2.1 Book Search EndpointA vulnerability was identified in TaleLin lin-cms-spring-boot up to 0.2.1. Affected by this vulnerability is the function searchBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. |
Lin Cms Spring Boot
|
| CVE-2026-96881 | Sep 24, 2026 |
lin-cms-spring-boot 0.2.1 Improper Auth: BookEndpoint Remote ExploitA vulnerability was determined in TaleLin lin-cms-spring-boot up to 0.2.1. Affected is the function getBooks of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. |
Lin Cms Spring Boot
|
| CVE-2026-96880 | Sep 24, 2026 |
Unauth Access in TaleLin lin-cms-spring-boot <=0.2.1 via ID ManipulationA vulnerability was found in TaleLin lin-cms-spring-boot up to 0.2.1. This impacts the function getBook of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. Performing a manipulation of the argument ID results in improper authorization. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. |
Lin Cms Spring Boot
|
| CVE-2026-10152 | May 30, 2026 |
TaleLin lin-cms-spring-boot <0.2.1: Improper Access Control in Book EndpointA vulnerability was detected in TaleLin lin-cms-spring-boot up to 0.2.1. This issue affects some unknown processing of the file src/main/java/io/github/talelin/latticy/controller/v1/BookController.java of the component book Endpoint. The manipulation results in improper access controls. The attack may be launched remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet. |
Lin Cms Spring Boot
|
| CVE-2025-15151 | Dec 28, 2025 |
A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0A vulnerability was determined in TaleLin Lin-CMS up to 0.6.0. This affects an unknown part of the file /tests/config.py of the component Tests Folder. This manipulation of the argument username/password causes password in configuration file. The attack is possible to be carried out remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been publicly disclosed and may be utilized. |
|
| CVE-2024-41600 | Jul 19, 2024 |
lin-CMS Springboot <0.2.1 Insecure Permissions in UserControllerInsecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component. |
Lin Cms Spring Boot
|
| CVE-2022-32430 | Jul 21, 2022 |
An access control issue in Lin CMS Spring Boot v0.2.1An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application. |
Lin Cms Spring Boot
|
| CVE-2020-18701 | Aug 16, 2021 |
Incorrect Access Control in Lin-CMS-Flask v0.1.1Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token upon logout, which allows for replaying packets. |
Lin Cms Flask
|
| CVE-2020-18699 | Aug 16, 2021 |
Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1Cross Site Scripting (XSS) in Lin-CMS-Flask v0.1.1 allows remote attackers to execute arbitrary code by entering scripts in the the 'Username' parameter of the in component 'app/api/cms/user.py'. |
Lin Cms Flask
|
| CVE-2020-18698 | Aug 16, 2021 |
Improper Authentication in Lin-CMS-Flask v0.1.1Improper Authentication in Lin-CMS-Flask v0.1.1 allows remote attackers to launch brute force login attempts without restriction via the 'login' function in the component 'app/api/cms/user.py'. |
Lin Cms Flask
|