Read the docs

lud

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

lud records in CISA KEV

No lud vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Oaskit 1 record MEDIUM

Records

2 records

TI-2026-47095 CVE-2026-66296 · GHSA-5rgx-mcq5-r7wv

Reflected XSS in oaskit's default HTML error handler

Priority MEDIUM 56

Improper Neutralization of Input During Web Page Generation (XSS) vulnerability in lud oaskit allows reflected cross-site scripting via the default HTML error handler.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00367 Published 2026-08-03 Fixed in 0.14.1 CWE-79
TI-2026-83620 CVE-2026-117680

Regex budget exhaustion in jsv bypasses schema validation

Priority MEDIUM 44

Improper Check for Unusual or Exceptional Conditions vulnerability in the pattern and patternProperties keywords in lud jsv allows an unauthenticated remote attacker to bypass schema validation via a string that matches…

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00191 Published 2026-11-01 Fixed in 0.26.2 CWE-754
Open these records in search →