Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
yuzutech records in CISA KEVNo yuzutech vulnerabilities are listed in CISA KEV.
Priority MEDIUM 43
due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00291 · Published 2025-12-18 · No fix listed CWE-552
Priority LOW 33
Kroki creates diagrams from textual descriptions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0043 · Published 2026-11-06 · Fixed in 0.31.2 CWE-22
Priority LOW 22
Kroki creates diagrams from textual descriptions.
CVSS 3.1MEDIUM 5.0· Network · Low privileges · No interaction · EPSS 0.00234 · Published 2026-11-06 · Fixed in 0.31.2 CWE-918
