Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Lichess Clear all filters
TI-2025-32501 CVE-2025-52186 · GHSA-85hq-hqhm-3jf2

Lichess lila before commit 11b4c0f (2025-06-02) contains…

Priority MEDIUM 62

Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery (SSRF) vulnerability in the game export API.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00344 Published 2025-11-13 No fix listed CWE-918
TI-2025-30423 CVE-2025-48051 · GHSA-chv9-fg26-xg8h

Cross-site scripting in Lichess Lila

Priority MEDIUM 60

powertip.ts in Lila (for Lichess) before ab0beaf allows XSS in some applications because of an innerHTML usage pattern in which text is extracted from a DOM node and interpreted as HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00439 Published 2025-05-15 Fixed CWE-79