CVE-2026-69114: Spacebar Unfiltered Bulk Delete Event
User-supplied array parameters from req.body are passed directly into event emissions or scope operations without prior database querying and filtering to ensure ownership within the target scope.
Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0
TS
TSgreprules fetch cve-2026-69114-spacebar-unfiltered-bulk-delete-event --engine opengrepDescription
User-supplied array parameters from req.body are passed directly into event emissions or scope operations without prior database querying and filtering to ensure ownership within the target scope.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
Finding verdicts0
No approved finding verdicts yet.
Scan diagnostics0
No scan diagnostics reported yet.