Medium
6.5
Subscriber Insecure Direct Object References (IDOR) in Hotel Booking <= 3.8 versions.
CVE-2026-118084
First seen on SecPulse
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| nicdark | Hotel Booking |
≤ 3.8 |
— |
References
- web patchstack.com
- web nvd.nist.gov
- web github.com