AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-21T18:16:50.730Z and has not been modified since then. Checkmate is an open-source tool for tracking server hardware and uptime. Versions 3.3.0 through 3.9.2 have a vulnerability in the unauthenticated GET /api/v1/status-page/:url endpoint, which returns complete monitor objects, including secret fi [truncated]
A user enumeration vulnerability exists in bluewave-labs/Checkmate through version 2.1.0. This vulnerability allows an unauthenticated remote attacker to determine whether a given email address is registered. The POST /api/v1/auth/recovery/request endpoint returns HTTP 200 for registered email addresses and a different status code for unregistered ones, enabling attackers to enumerate valid user accounts. [truncated]
