Vulnerabilities

TI-2026-25906 CVE-2026-33510

DOM-Based XSS in Homarr /auth/login Redirect

HIGH 71

Homarr is an open-source dashboard.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00238 Published 2026-04-06 Fixed in 1.57.0 CWE-601

TI-2026-25111 CVE-2026-32602

MEDIUM 53

Homarr is an open-source dashboard.

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00112 Published 2026-04-06 Fixed in 1.57.0 CWE-367

TI-2026-22150 CVE-2026-27796

HIGH 72

Homarr is an open-source dashboard.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01261 Published 2026-03-07 Fixed in 1.54.0 CWE-200

TI-2026-22151 CVE-2026-27797

MEDIUM 63

Homarr is an open-source dashboard.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00484 Published 2026-03-07 Fixed in 1.54.0 CWE-918

TI-2026-20286 CVE-2026-25123

LOW 30

Homarr is an open-source dashboard.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00293 Published 2026-02-06 Fixed in 1.52.0 CWE-918

TI-2025-41252 CVE-2025-67493

MEDIUM 41

Homarr is an open-source dashboard.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00303 Published 2025-12-17 Fixed in 1.45.3 CWE-20

TI-2025-40097 CVE-2025-64759

LOW 35

Homarr is an open-source dashboard.

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00342 Published 2025-11-19 Fixed in 1.43.3 CWE-20

TI-2025-34138 CVE-2025-54313 · GHSA-f29h-pxvx-f335

CRITICAL 90KEV

eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05125 Published 2025-07-19 Fixed in 8.10.2, 9.1.2 +6 CWE-506