Repository navigation
Security: latitude-dev/latitude-llm
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
removeMember has no admin gate on any path, so any organization member can remove every adminGHSA-3jwr-fh8p-v85j published
Oct 8, 2026 by geclosHigh -
Missing authorization check on POST /v1/members lets any org member mint an admin (org takeover)GHSA-cc29-29hq-cgc8 published
Sep 17, 2026 by geclosHigh