CVE-2026-31839

Striae is a firearms examiner's comparison companion. A high-severity integrity bypass vulnerability existed in Striae's digital confirmation workflow prior to v3.0.0. Hash-only validation trusted manifest hash fields that could be modified together with package content, allowing tampered confirmation packages to pass integrity checks. This vulnerability is fixed in 3.0.0.

• CWE-354

• https://github.com/striae-org/striae/releases/tag/v3.0.0Release Notes
• https://github.com/striae-org/striae/security/advisories/GHSA-mmf8-487q-p45mVendor Advisory

Published

Mar 11, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-31833Umbraco is an ASP.NET CMS. From 16.2.0 to before 16.5.1 and …6.7
• CVE-2026-31834Umbraco is an ASP.NET CMS. From 15.3.1 to before 16.5.1 and …7.2
• CVE-2026-31835Vaultwarden is a Bitwarden-compatible server written in Rust…5.4
• CVE-2026-31836Checkmate is an open-source, self-hosted tool designed to tr…8.1
• CVE-2026-31837Istio is an open platform to connect, manage, and secure mic…7.5
• CVE-2026-31838Istio is an open platform to connect, manage, and secure mic…5.3
• CVE-2026-3184A flaw was found in util-linux. Improper hostname canonicali…5.3
• CVE-2026-31840Parse Server is an open source backend that can be deployed …9.8
• CVE-2026-31841Hyperterse is a tool-first MCP framework for building AI-rea…6.5
• CVE-2026-31842Tinyproxy through 1.11.3 is vulnerable to HTTP request parsi…8.7
• CVE-2026-31843The goodoneuz/pay-uz Laravel package (<= 2.2.24) contains a …10
• CVE-2026-31844An authenticated SQL Injection vulnerability (CWE-89) exists…8.8