Vendors / LycheeOrg Records 21 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 8
Exploited now LycheeOrg records in CISA KEV No LycheeOrg vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 71
Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.
CVSS 3.1 HIGH 8.3· Network · No auth · User interaction · EPSS 0.00377 · Published 2024-03-22 · No fix listed CWE-352
Priority MEDIUM 60
Cross Site Scripting (XSS) vulnerability in Lychee 3.1.6, allows remote attackers to execute arbitrary code and obtain sensitive information via the title parameter when creating an album.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0046 · Published 2024-03-22 · No fix listed CWE-79
Priority MEDIUM 57
Lychee is a free, open-source photo-management tool.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0027 · Published 2026-03-26 · Fixed in 7.5.1 CWE-918
Priority MEDIUM 55
Lychee is a free, open-source photo-management tool.
CVSS 4.0 MEDIUM 4.8· Network · Low privileges · User interaction · EPSS 0.00222 · Published 2026-03-26 · Fixed in 7.5.3 CWE-79
Priority MEDIUM 45
Lychee is a free, open-source photo-management tool.
CVSS 4.0 LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00211 · Published 2026-04-09 · Fixed in 7.5.4 CWE-863
Priority MEDIUM 43
Lychee is a free photo-management tool.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00472 · Published 2023-12-28 · Fixed in 5.0.2 CWE-89
Priority LOW 29
Lychee-v3 3.2.16 is affected by a Cross Site Scripting (XSS) vulnerability in php/Access/Guest.php.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00879 · Published 2021-12-15 · No fix listed CWE-79
Priority LOW 12
Lychee is a free, open-source photo-management tool.
CVSS 4.0 LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00239 · Published 2026-03-26 · Fixed in 7.5.2 CWE-918
Priority LOW 12
Lychee is a free, open-source photo-management tool.
CVSS 4.0 LOW 2.3· Network · No auth · User interaction · EPSS 0.00271 · Published 2026-01-12 · Fixed in 7.1.0 CWE-863
Open these records in search → All records by CVSS severity
1 8 6 6 0
THREATIST.IORead the docs