webstudio-is CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW webstudio-is CVE published 2026-10-20

CVE-2026-113596

CVE-2026-113596 debrief: Webstudio before 0.256.0 Information Disclosure via tRPC publishedBuilds and findManyByIds. The vulnerability allows authenticated users to read other users' project data. Defenders should assess exposure and verify instances are updated to 0.256.0 or later. Authenticated users with project UUID knowledge are at risk of reading other users' project data. This issue is particularly [truncated]