Vendors / webrecorder Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now webrecorder records in CISA KEV No webrecorder vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 45
Browsertrix is a high-fidelity, browser-based crawling service for web archiving that can be self-hosted or used through Webrecorder's hosted instance.
CVSS 4.0 CRITICAL 9.4· Network · Low privileges · No interaction · EPSS 0.01217 · Published 2026-09-17 · Fixed in 1.22.8 CWE-20
Priority LOW 31
wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00254 · Published 2025-09-09 · Fixed in 2.23.11, 2.3.17 +1 CWE-79
Priority LOW 28
Webrecorder pywb before 2.6.0 allows XSS because it does not ensure that Jinja2 templates are autoescaped.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00699 · Published 2021-08-18 · Fixed in 2.6.0 CWE-79
Open these records in search → All records by CVSS severity
1 1 1 0 0
