whisper-money Vulnerabilities and Affected Products
Vulnerabilities associated with whisper-money.
Products
Clear product- whisper-money1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-23844MEDIUM | Whisper Money has IDOR Vulnerability on sync/balances endpointWhisper Money is a personal finance application. Versions prior to 0.1.5 have an insecure direct object reference vulnerability. A user can update/create account balances in other users' bank accounts. Version 0.1.5 fixes the issue. | CVSS4.9v4.0 | EPSS0.193% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |