Leafwiki
Perber · 4 CVEs
CVE-2026-80189
HIGH
LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction
Aug 25, 2026
CVE-2026-53529
MEDIUM
LeafWiki vulnerable to stored XSS via search-result title (highlight() returns raw title into dangerouslySetInnerHTML)
Aug 21, 2026
CVE-2026-53528
HIGH
FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter
Aug 21, 2026
CVE-2026-53527
HIGH
LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update
Aug 21, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-80189 | LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction | HIGH | 0.55% | Aug 25, 2026 |
| CVE-2026-53529 | LeafWiki vulnerable to stored XSS via search-result title (highlight() returns raw title into dangerouslySetInnerHTML) | MEDIUM | 0.39% | Aug 21, 2026 |
| CVE-2026-53528 | FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter | HIGH | 0.55% | Aug 21, 2026 |
| CVE-2026-53527 | LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update | HIGH | 0.42% | Aug 21, 2026 |
Showing 1 to 4 of 4 CVEs