Read the docs

huginn

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

huginn records in CISA KEV

No huginn vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-45356 CVE-2026-63769 · GHSA-9r7r-j892-2c6m

Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method

Priority MEDIUM 61

Huginn before 2026.09.09 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs.

CVSS 4.0MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00415 Published 2026-07-20 Fixed in 2026.09.09 CWE-918
TI-2026-85476 CVE-2026-123094 · GHSA-wjrx-rm4h-jrhj

Stored cross-site scripting in Huginn via OAuth service display name

Priority LOW 22

Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display names as html_safe.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00178 Published 2026-11-05 Fixed in 2026.11.05 CWE-79
Open these records in search →