nl-portal/nl-portal-backend-libraries Security Advisories | GitStock

high2026-07-08

NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak

GHSA-6h3c-r723-7fx3 · CVE-2026-49464

medium2026-07-08

NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries

GHSA-qpm9-h556-mwxm · CVE-2026-49463

medium2026-06-19

NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)

GHSA-xm3x-9cfw-jhx4 · CVE-2026-55414

medium2026-06-18

NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)

GHSA-jr45-52cw-69h5 · CVE-2026-54683