Vulnerabilities

TI-2026-55430 CVE-2026-80189 · GHSA-vx6x-47wx-xjjj

LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction

LOW 32

LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00548 Published 2026-08-25 Fixed in 0.12.1 CWE-409

TI-2026-38602 CVE-2026-53529

LOW 22

LeafWiki is a self-hosted wiki.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.0039 Published 2026-08-21 Fixed in 0.10.2 CWE-79

TI-2026-38601 CVE-2026-53528

MEDIUM 41

LeafWiki is a self-hosted wiki.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00548 Published 2026-08-21 Fixed in 0.10.1 CWE-23

TI-2026-38600 CVE-2026-53527

MEDIUM 40

LeafWiki is a self-hosted wiki.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00417 Published 2026-08-21 Fixed in 0.10.1 CWE-269