Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: CIRCL Vulnerability-Lookup 2.18.0 Clear all filters
TI-2025-27744 CVE-2025-42620 · GHSA-r226-j7pf-48g6

CSRF vulnerability in CIRCL Vulnerability-Lookup

Priority LOW 36

In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting (XSS).

CVSS 4.0HIGH 8.3 Network High privileges User interaction EPSS 0.00314 Published 2025-12-08 Fixed in 2.18.0 CWE-79
TI-2025-27743 CVE-2025-42616 · GHSA-cr8j-9qv8-5jph

CSRF vulnerability in CIRCL Vulnerability-Lookup

Priority LOW 32

Some endpoints in vulnerability-lookup that modified application state (e.g.

CVSS 4.0HIGH 7.0 Network High privileges User interaction EPSS 0.00185 Published 2025-12-08 Fixed in 2.18.0 CWE-352