CVE-2026-96881

Name of the Vulnerable Software and Affected Versions TaleLin lin-cms-spring-boot versions prior to 0.2.2

Description A remote manipulation of the book endpoint can lead to improper authorization. The issue resides in the getBooks() function within the src/main/java/io/github/talelin/latticy/controller/v1/BookController.java file.

Recommendations As a temporary workaround, consider restricting access to the getBooks() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.