Read the docs

NAVER

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

NAVER records in CISA KEV

No NAVER vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ngrinder 7 records MEDIUM Cloud Explorer 4 records MEDIUM Billboard.js 2 records MEDIUM Loctouch 2 records LOW Lucy-xss-filter 2 records MEDIUM Comic Viewer 1 record MEDIUM Line Play 1 record LOW Nhn Japan Naver Line 1 record LOW

Records

2 records in Lucy-xss-filter · all components

TI-2026-19139 CVE-2026-23768 · GHSA-2xhv-22cq-xj7w

Server-side request forgery in NAVER lucy-xss-filter

Priority MEDIUM 60

lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs when the ObjectSecurityListener or EmbedSecurityListener option is enabled and embed or object tags are used…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00241 Published 2026-01-16 Fixed CWE-918
TI-2026-19140 CVE-2026-23769 · GHSA-vv6w-5g5j-5p4w

Cross-site scripting in NAVER lucy-xss-filter

Priority LOW 34

lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanitization caused by misconfigured default superset rule files.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0022 Published 2026-01-16 Fixed CWE-79
Open these records in search →