actualbudget Summary

Latest vulnerabilities published by actualbudget

JSON RSS CSV 🔔 Create Alert Trigger

12 June 2026

actual-server has a path traversal vulnerability
CVE-2026-43872
ActualbudgetActual5.3MEDIUM
actual Allows Electron to Run As Node
CVE-2026-42890
ActualbudgetActual4.8MEDIUM
Actual has an OpenID `client_secret` Disclosure via Broken Authorization Guard in `/openid/config`
CVE-2026-42604
ActualbudgetActual6.9MEDIUM

24 April 2026

Local Security Flaw in Actual Personal Finance Tool Affects User Privileges
CVE-2026-33318
ActualbudgetActual8.8HIGH

26 February 2026

Local-first Personal Finance Tool Vulnerability in Actual Software
CVE-2026-27638
ActualbudgetActual5.7MEDIUM

24 February 2026

Local-First Personal Finance Tool Vulnerability in Actual Budget Server by Actual
CVE-2026-27584
ActualbudgetActual9.2CRITICAL