# cve.now: Baptistearno

The newest entries naming Baptistearno as an affected vendor (up to 200), of 34 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-62865](https://cve.now/CVE-2026-62865.md): TypeBot: Arbitrary server file read via Send Email block attachment path (CVSS 8.7)
- [CVE-2026-62861](https://cve.now/CVE-2026-62861.md): TypeBot: Cross-tenant custom-domain removal via unbound \`name\` in handleDeleteCustomDomain (CVSS 6.4)
- [CVE-2026-62862](https://cve.now/CVE-2026-62862.md): TypeBot: Account takeover via brute-forceable 6-digit magic-link code (CVSS 9.1)
- [CVE-2026-48763](https://cve.now/CVE-2026-48763.md): TypeBot has Arbitrary S3 Object Write in deprecated public upload endpoint via attacker-controlled filePath (CVSS 8.2)
- [CVE-2026-48762](https://cve.now/CVE-2026-48762.md): TypeBot Vulnerable to Server-Side Request Forgery (SSRF) in OpenAI Transcription Handler (CVSS 5.4)
- [CVE-2026-48765](https://cve.now/CVE-2026-48765.md): TypeBot vulnerable to cross-workspace OAuth credential takeover in updateOAuthCredentials via missing object binding (CVSS 9.9)
- [CVE-2026-47705](https://cve.now/CVE-2026-47705.md): TypeBot vulnerable to CSV injection in result export (CVSS 9.6)
- [CVE-2026-48767](https://cve.now/CVE-2026-48767.md): Google Sheets OAuth access token disclosure to guest members via getAccessToken (CVSS 7.6)
- [CVE-2026-48494](https://cve.now/CVE-2026-48494.md): TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via global \`wa-preview-{phone}\` session ids (CVSS 7.1)
- [CVE-2026-47704](https://cve.now/CVE-2026-47704.md): TypeBot vulnerable to cross-typebot webhook resume via unchecked \`resultId\` lineage allows unauthorized control of another bot's waiting session (CVSS 7.1)
- [CVE-2026-48483](https://cve.now/CVE-2026-48483.md): TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, allowing SSRF from the Typebot server (CVSS 5.4)
- [CVE-2026-48495](https://cve.now/CVE-2026-48495.md): TypeBot Google Sheets OAuth callback can create credentials in unauthorized workspaces and modify arbitrary typebots (CVSS 7.1)
- [CVE-2026-48766](https://cve.now/CVE-2026-48766.md): TypeBot vulnerable to OpenAI API key exfiltration in listModels via attacker-controlled baseUrl (CVSS 7.6)
- [CVE-2026-42142](https://cve.now/CVE-2026-42142.md): TypeBot has Authorization Bypass in Google Sheets \`getSheets\` Endpoint that Allows Cross-Workspace Credential Access (CVSS 7.1)
- [CVE-2026-47702](https://cve.now/CVE-2026-47702.md): TypeBot API tokens stored in plaintext (CVSS 9.1)
- [CVE-2026-49213](https://cve.now/CVE-2026-49213.md): TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution (CVSS 8.1)
- [CVE-2026-48764](https://cve.now/CVE-2026-48764.md): TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass (CVSS 8.2)
- [CVE-2026-48768](https://cve.now/CVE-2026-48768.md): TypeBot: Unauthenticated arbitrary s3 object write in generate-upload-url via unsanitized fileName (CVSS 9.3)
- [CVE-2026-48759](https://cve.now/CVE-2026-48759.md): TypeBot: Cross-Workspace Theme Template IDOR (Modification and Deletion) (CVSS 7.1)
- [CVE-2026-39969](https://cve.now/CVE-2026-39969.md): TypeBot: WhatsApp Webhook Endpoint Missing Signature Verification (CVSS 6.5)
- [CVE-2026-39967](https://cve.now/CVE-2026-39967.md): TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter (CVSS 3.1)
- [CVE-2026-39968](https://cve.now/CVE-2026-39968.md): TypeBot: Cross-Workspace Credential Theft via Bot-Engine Preview Endpoint (CVSS 7.1)
- [CVE-2026-39966](https://cve.now/CVE-2026-39966.md): TypeBot: Async filter() bypasses authorization, allowing IDOR in getLinkedTypebots and leaking cross-workspace bot definitions (CVSS 6.5)
- [CVE-2026-39970](https://cve.now/CVE-2026-39970.md): TypeBot: Stored Cross-Site Scripting (XSS) via SVG File Upload On Profile Picture Form (CVSS 8.5)
- [CVE-2026-39965](https://cve.now/CVE-2026-39965.md): TypeBot: SSRF via Open Redirect Bypass in HTTP Request and Code Blocks (CVSS 7.7)
- [CVE-2026-39964](https://cve.now/CVE-2026-39964.md): TypeBot: Stored XSS via javascript: URI in text bubble links — bot author executes JS on visitors' browsers (CVSS 5.4)
- [CVE-2026-34207](https://cve.now/CVE-2026-34207.md): TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation (CVSS 7.6)
- [CVE-2026-33712](https://cve.now/CVE-2026-33712.md): TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls (CVSS 10.0)
- [CVE-2026-28445](https://cve.now/CVE-2026-28445.md): Typebot: Stored XSS via Rating Block Custom Icon Bypasses isUnsafe Sandbox in Builder Preview (CVSS 8.7)
- [CVE-2026-28444](https://cve.now/CVE-2026-28444.md): Typebot: IDOR in Result Logs Endpoint Allows Cross-Workspace Data Disclosure (CVSS 6.5)
- [CVE-2025-65098](https://cve.now/CVE-2025-65098.md): Typebot Vulnerable to Credential Theft via Client-Side Script Execution and API Authorization Bypass (CVSS 7.4)
- [CVE-2025-64709](https://cve.now/CVE-2025-64709.md): Typebot May Expose AWS EKS Credentials via Server Side Request Forgery in Webhook Block (CVSS 9.6)
- [CVE-2025-64706](https://cve.now/CVE-2025-64706.md): Typebot IDOR Vulnerability: Unauthorized API Token Deletion and Exposure (CVSS 5.0)
- [CVE-2024-30264](https://cve.now/CVE-2024-30264.md): typebot.io: \`GHSL-2024-040\` (CVSS 8.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/baptistearno
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.