Vulnerabilities

TI-2026-53043 CVE-2026-75774 · GHSA-g3wj-5278-jq3m

karakeep-app karakeep OAuth Sign-In auth.ts improper authentication

MEDIUM 61

A vulnerability was determined in karakeep-app karakeep up to 0.32.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00579 Published 2026-08-18 No fix listed CWE-287

TI-2026-53042 CVE-2026-75773 · GHSA-2ccr-52p8-6754

MEDIUM 61

A vulnerability was found in karakeep-app karakeep up to 0.32.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00653 Published 2026-08-18 Fixed in 0.33.0 CWE-307

TI-2026-32929 CVE-2026-45082

HIGH 66

Karakeep is a elf-hostable bookmark-everything app.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.003 Published 2026-05-26 Fixed in 0.32.0 CWE-918