LitmusChaos Litmus

• CVE-2025-14261 High 7.1 Lack of entropy allows registered low-privileged users of Litmus to crack valid JWT tokens and gain admin privileges 0.3%
• CVE-2025-8797 Medium 6.3 LitmusChaos Litmus LocalStorage permission 0.6%
• CVE-2025-8796 Medium 5.4 LitmusChaos Litmus Delete Request delete_project authorization 0.4%
• CVE-2025-8795 Medium 6.3 LitmusChaos Litmus login access control 0.5%
• CVE-2025-8794 Medium 5.3 LitmusChaos Litmus LocalStorage authorization 0.3%
• CVE-2025-8793 Medium 4.3 LitmusChaos Litmus resource injection 0.5%
• CVE-2025-8792 Medium 4.3 LitmusChaos Litmus client-side enforcement of server-side security 1.1%
• CVE-2025-8791 Medium 6.3 LitmusChaos Litmus list_projects improper authorization 0.4%