Vulnerabilities

TI-2026-22762 CVE-2026-28499 · GHSA-6jj5-j4j8-8473

LeafKit's HTML escaping may be skipped for Collection values, enabling XSS

HIGH 70

LeafKit is a templating language with Swift-inspired syntax.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00281 Published 2026-03-18 Fixed in 1.14.2 CWE-116

TI-2026-21572 CVE-2026-27120 · GHSA-4hfh-fch3-5q7p

MEDIUM 60

Leafkit is a templating language with Swift-inspired syntax.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00266 Published 2026-02-20 Fixed in 1.4.1 CWE-75

TI-2021-15509 CVE-2021-37634 · GHSA-rv3x-xq3r-8j9h

LOW 34

Leafkit is a templating language with Swift-inspired syntax.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.0071 Published 2021-08-09 Fixed in 1.3.0 CWE-79