CVE-2026-24931

Medium · 5.9

CVSS

5.9

EPSS

0.1%

Published

Feb 6, 2026

CISA due date

—

The record

Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Affected packages

Ecosystem	Package	Introduced	Fixed