CIRCL Vulnerability-Lookup

• CVE-2025-42620 High 8.3 CSRF vulnerability in CIRCL Vulnerability-Lookup 0.3%
• CVE-2025-42616 High 7.0 CSRF vulnerability in CIRCL Vulnerability-Lookup 0.2%
• CVE-2025-42615 High 8.1 Improper Restriction of Excessive Authentication Attempts vulnerability in CIRCL Vulnerability-Lookup 0.4%
• CVE-2025-60249 Medium 6.4 vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a vulnerability-lookup instance who can add bundles, comments, or sightings. A cross-site scripting (XSS) vul 0.2%
• CVE-2025-32413 Medium 6.4 Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py. 0.3%