Read the docs

Laundry Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Laundry Project records in CISA KEV

No Laundry Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Laundry 2 records HIGH

Records

2 records in Laundry · all components

TI-2025-32888 CVE-2025-52841 · GHSA-m9gv-849c-fgw3

Laundry 2.3.0 - Account Takeover via CSRF

Priority HIGH 72

Cross-Site Request Forgery (CSRF) vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover.

CVSS 4.0HIGH 8.5 Network No auth User interaction EPSS 0.00226 Published 2025-07-02 No fix listed CWE-352
TI-2025-32889 CVE-2025-52842 · GHSA-f85g-7486-87vh

Laundry 2.3.0 - Account Takeover via Reflected XSS

Priority MEDIUM 56

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Laundry on Linux, MacOS allows Account Takeover.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00264 Published 2025-07-02 No fix listed CWE-79
Open these records in search →