Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-45294
5.3
MEDIUMCVSS v3
Published
May 29, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to 1.8.219, the password reset endpoint returns visually distinct responses depending on whether the submitted email address belongs to an existing user account, allowing unauthenticated attackers to enumerate valid helpdesk agent email addresses. This vulnerability is fixed in 1.8.219.
freescout-help-desk/freescout
GitHubFreeScout — Free self-hosted help desk & shared mailbox (Zendesk / Help Scout alternative)
GitHubFreeScout — Free self-hosted help desk & shared mailbox (Zendesk / Help Scout alternative)NVD