Lookyloo lookyloo

• CVE-2026-55835 Medium 6.9 Lookyloo: Potential sub-system DoS due to parameter missmatch in notification 0.4%
• CVE-2026-66913 Medium 6.9 Zip Bomb in Lookyloo Capture Upload Allows Denial of Service 0.4%
• CVE-2026-66824 Critical 9.2 Stored Cross-Site Scripting via Unsafe Capture Tree JSON Embedding 0.4%
• CVE-2025-66460 Medium 5.3 Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables 0.2%
• CVE-2025-66459 Medium 5.3 Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML 0.3%
• CVE-2025-66458 Medium 5.3 Lookyloo has multiple XSS due to unsafe use of f-strings in Markup 0.2%
• CVE-2025-65095 Critical 9.4 Lookyloo is vulnerable due to improper user input sanitization 0.4%