Vulnerabilities
Unauthenticated ZIP Download Flaw in Lychee Photo Manager Exposes Albums
A high-severity vulnerability in Lychee allows attackers to download protected album archives without passwords, until version 7.6.3 is deployed.
Lychee
Everything AppSec Scoop has reported about Lychee: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Lychee photo manager flaw allows item release via test payment gateway
CVE-2026-77466 lets users bypass payment in Lychee webshop versions before 7.7.0 by forcing a dummy provider.