Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Lite XL Clear all filters
TI-2025-11116 CVE-2025-12121 · GHSA-w994-qmmq-w97w

OS command injection in Lite XL

Priority LOW 34

Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00375 Published 2025-11-20 No fix listed CWE-78
TI-2025-11115 CVE-2025-12120 · GHSA-63qf-frrc-rvqp

Code injection in Lite XL

Priority LOW 34

Lite XL versions 2.1.8 and prior automatically execute the .lite_project.lua file when opening a project directory, without prompting the user for confirmation.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.0033 Published 2025-11-20 No fix listed CWE-94