Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: perspective-dev Clear all filters
TI-2026-47522 CVE-2026-67200 · GHSA-pcjm-g28j-xmf9

Perspective 5.0.0 Path Traversal via cwd_static_file_handler

Priority HIGH 77

Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0085 Published 2026-08-04 No fix listed CWE-22
TI-2026-47521 CVE-2026-67199 · GHSA-vc2q-3q58-3rrv

Perspective 5.0.0 DoS via Loop Expression Evaluation

Priority MEDIUM 64

Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs i…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00519 Published 2026-08-04 No fix listed CWE-770
TI-2026-47520 CVE-2026-67198 · GHSA-pr84-483f-rmg2

Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher

Priority HIGH 77

Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf m…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00295 Published 2026-08-04 No fix listed CWE-616
TI-2026-47519 CVE-2026-67196 · GHSA-4hrp-pjm9-fv3q

Perspective 5.0.0 XSS via Debug Plugin innerHTML Interpolation

Priority LOW 23

Perspective 5.0.0 contains a cross-site scripting vulnerability in the built-in Debug plugin that allows attackers to inject arbitrary HTML and JavaScript by writing table cell values containing unescaped HTML markup, wh…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00255 Published 2026-08-04 No fix listed CWE-79
TI-2026-47518 CVE-2026-67195 · GHSA-3jqr-28gj-8vq4

Perspective 5.0.0 RCE via eval() Expression Injection

Priority HIGH 73

Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer ba…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01193 Published 2026-08-04 No fix listed CWE-95