Log in Start free

aliasvault

Products

ProductCVEsExploitedLatest
aliasvault5–Oct 15, 2026
ghcr.io/aliasvault/aliasvault1–Oct 15, 2026
ghcr.io/aliasvault/api1–Oct 15, 2026
ghcr.io/lanedirt/aliasvault-api1–Oct 15, 2026

Exploited and recent CVEs

  • CVE-2026-94621 Medium 6.3 AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction 0.2%
  • CVE-2026-94621 Medium 6.3 AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction 0.2%
  • CVE-2026-94621 Medium 6.3 AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction 0.2%
  • CVE-2026-94621 Medium 6.3 AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction 0.2%
  • CVE-2026-55587 High 8.1 AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID 0.1%
  • CVE-2026-26266 Critical 9.3 AliasVault affected by Cross-Site Scripting (XSS) via Email HTML Rendering 0.3%
  • CVE-2026-22694 Medium 6.1 AliasVault is Missing Origin Validation in Android Passkey Credential Provider 0.1%
  • CVE-2025-59344 High 7.7 AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction 0.3%