colanode CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM colanode CVE published 2026-10-14

CVE-2026-110766

CVE-2026-110766 is a path traversal vulnerability in Colanode Server through version 0.4.7. Authenticated users can read arbitrary .jpeg files by manipulating the avatarId in the GET /client/v1/avatars/:avatarId route. This issue has a CVSS score of 5.3 and is considered medium severity. The vulnerability allows for potential unauthorized access to sensitive information. Defenders should prioritize verify [truncated]