Vulnerability Database

@actual-app / sync-server

• You can search for specific versions with https://synscan.net/product/sync--server/1.2.3

Title	Severity	Exploit	Date	Affected Version
Actual Sync-server Gocardless service is logging sensitive data including bearer tokens and account numbers	Medium		Oct 20, 2025	<= 25.10.0