CVE-2025-22138

Name of the Vulnerable Software and Affected Versions @codidact/qpixel (affected versions not specified)

Description The issue affects @codidact/qpixel, a Q&A-based community knowledge-sharing software. When a category is set to private or limited-visibility within QPixel's admin tools, suggested edits within this category can still be viewed by unprivileged or anonymous users via the suggested edit queue. Private or limited-visibility categories should not be considered ways to store sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.