Browse CVEs

HIGH 7.5 CVE-2026-21868 Flag Forge is a Capture The Flag (CTF) platform. Versions 2.3.2 and below have a Regular Expression Denial of Service (ReDoS) vulnerability in the us… Flagforge 2.3.3+ Fix from $1,9502026-01-08 CRITICAL 9.1 CVE-2025-61777 Flag Forge is a Capture The Flag (CTF) platform. Starting in version 2.0.0 and prior to version 2.3.2, the `/api/admin/badge-templates` (GET) and `/a… Flagforge 2.3.2+ Fix from $2,3002025-10-06 HIGH 8.2 CVE-2025-59932 Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE … Flagforge 2.3.1+ Fix from $1,9502025-09-27 MEDIUM 5.3 CVE-2025-59843 Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.2, the public endpoint /api/user/[username] returns user email add… Flagforge 2.3.1+ Fix from $1,6002025-09-26 CRITICAL 9.8 CVE-2025-59841 Flag Forge is a Capture The Flag (CTF) platform. In versions from 2.2.0 to before 2.3.1, the FlagForge web application improperly handles session inv… Flagforge 2.3.1+ Fix from $2,3002025-09-25 CRITICAL 9.8 CVE-2025-59827 Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, the /api/admin/assign-badge endpoint lacks proper access control, allowing any aut… Flagforge Mitigation only Fix from $2,3002025-09-24 HIGH 7.5 CVE-2025-59833 Flag Forge is a Capture The Flag (CTF) platform. In versions from 2.1.0 to before 2.3.0, the API endpoint GET /api/problems/:id returns challenge hin… Flagforge 2.3+ Fix from $1,9502025-09-24 HIGH 7.6 CVE-2025-59826 Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, non-admin users can create arbitrary challenges, potentially introducing malicious… Flagforge Mitigation only Fix from $1,9502025-09-23