Vulnerabilities

TI-2026-40309 CVE-2026-55847 · GHSA-gx93-m64w-5m6h

Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace rendering

LOW 27

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00338 Published 2026-09-14 Fixed in 2.39.0 CWE-79

TI-2026-40308 CVE-2026-55846 · GHSA-82cg-3hv7-74gc

MEDIUM 61

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00181 Published 2026-09-14 Fixed in 2.39.0 CWE-22

TI-2025-32924 CVE-2025-52888 · GHSA-h7qf-qmf3-85qg

HIGH 72

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0037 Published 2025-06-24 Fixed in 2.34.1 CWE-611