Vulnerabilities

TI-2026-21236 CVE-2026-26266

AliasVault affected by Cross-Site Scripting (XSS) via Email HTML Rendering

MEDIUM 42

AliasVault is a privacy-first password manager with built-in email aliasing.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00278 Published 2026-03-03 Fixed in 0.26.0 CWE-79

TI-2026-02566 CVE-2026-2974 · GHSA-hx47-q2x9-r28j

MEDIUM 44

A vulnerability was identified in AliasVault App up to 0.25.3 on Android/iOS.

CVSS 4.0LOW 2.0 Local Low privileges No interaction EPSS 0.00111 Published 2026-02-23 Fixed in 0.26.0 CWE-285

TI-2026-18221 CVE-2026-22694

LOW 26

AliasVault is a privacy-first password manager with built-in email aliasing.

CVSS 3.1MEDIUM 6.1 Local No auth User interaction EPSS 0.00135 Published 2026-01-14 Fixed in 0.25.3 CWE-346