Read the docs

amundsen-io

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

amundsen-io records in CISA KEV

No amundsen-io vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-61679 CVE-2026-90772 · GHSA-pxc2-2wvq-r8jw

Amundsen Frontend through 4.3.0 Stored XSS via Description

Priority HIGH 69

Amundsen frontend through 4.3.0 renders table, dashboard, and feature descriptions with dangerouslySetInnerHTML without HTML sanitization in ResourceListItem components.

CVSS 4.0HIGH 8.3 Network Low privileges User interaction EPSS 0.00362 Published 2026-09-13 No fix listed CWE-79
Open these records in search →