Vulnerabilities

TI-2025-35262 CVE-2025-56139 · GHSA-pf9x-3p57-vp26

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview…

LOW 24

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or comment before publishing.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00327 Published 2025-09-03 No fix listed CWE-449

TI-2024-18871 CVE-2024-28425 · GHSA-f892-3gpj-v83f

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the…

LOW 36

greykite v1.0.0 was discovered to contain an arbitrary file upload vulnerability in the load_obj function at /templates/pickle_utils.py.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00561 Published 2024-03-14 No fix listed CWE-434

TI-2021-03122 CVE-2021-4264 · GHSA-c6rp-wrp9-qr4q

LinkedIn dustjs prototype pollution

MEDIUM 40

A vulnerability was found in LinkedIn dustjs up to 2.x and classified as problematic.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01153 Published 2022-12-21 Fixed in 3.0.0 CWE-1321

TI-2021-08400 CVE-2021-26722 · GHSA-rfw2-x9f8-2f6m

LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of…

LOW 33

LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the "No results found for" message in the search bar.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03203 Published 2021-02-05 Fixed in 1.4.1 CWE-79

TI-2008-03295 CVE-2008-3435 · GHSA-5gwj-42jg-vg3v

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity…

LOW 37

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilg…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0184 Published 2008-08-01 No fix listed CWE-94

TI-2007-03832 CVE-2007-3955 · GHSA-rm4p-5c85-7wp5

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll…

MEDIUM 41

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument (varBrowser argume…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.08238 Published 2007-07-24 No fix listed