[LOW] Dolibarr ERP CRM is vulnerable to Improper Authorization through its Leave Request REST API

PKSA-199z-kb1w-7qjg CVE-2026-10215 GHSA-7fg5-vc77-69fp

Affected package: dolibarr/dolibarr

Affected version: <=15.0.3

Reported by:
GitHub