Records8All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
homarr-labs records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsPriority CRITICAL 90KEV
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05125 · Published 2025-07-19 · Fixed in 8.10.2, 9.1.2 +6 CWE-506
Priority HIGH 72
Homarr is an open-source dashboard.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01261 · Published 2026-03-07 · Fixed in 1.54.0 CWE-200
Priority HIGH 71
Homarr is an open-source dashboard.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00238 · Published 2026-04-06 · Fixed in 1.57.0 CWE-601
Priority MEDIUM 63
Homarr is an open-source dashboard.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00484 · Published 2026-03-07 · Fixed in 1.54.0 CWE-918
Priority MEDIUM 53
Homarr is an open-source dashboard.
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.00112 · Published 2026-04-06 · Fixed in 1.57.0 CWE-367
Priority MEDIUM 41
Homarr is an open-source dashboard.
CVSS 3.1CRITICAL 9.0· Network · Low privileges · User interaction · EPSS 0.00303 · Published 2025-12-17 · Fixed in 1.45.3 CWE-20
Priority LOW 35
Homarr is an open-source dashboard.
CVSS 3.1HIGH 8.1· Network · High privileges · User interaction · EPSS 0.00342 · Published 2025-11-19 · Fixed in 1.43.3 CWE-20
Priority LOW 30
Homarr is an open-source dashboard.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00293 · Published 2026-02-06 · Fixed in 1.52.0 CWE-918
