Vulnerabilities

TI-2025-39620 CVE-2025-64177

ThinkDashboard: Stored XSS in Dashboard via Malicious Bookmark

MEDIUM 60

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00247 Published 2025-11-06 Fixed in 0.6.8 CWE-79

TI-2025-39619 CVE-2025-64176

HIGH 66

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00281 Published 2025-11-06 Fixed in 0.6.8 CWE-20

TI-2025-39762 CVE-2025-64327

MEDIUM 63

ThinkDashboard is a self-hosted bookmark dashboard built with Go and vanilla JavaScript.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00353 Published 2025-11-06 Fixed in 0.6.8 CWE-918