LMFDB

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

LMFDB records in CISA KEV

No LMFDB vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-85577 CVE-2026-123198

LMFDB Unauthenticated Server-Side Template Injection in render_knowl

HIGH 81

LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that allows unauthenticated attackers to inject Jinja expressions via request parameters.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00845 Published 2026-11-05 Fixed CWE-1336

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0