Log in Start free

allure-framework

Products

ProductCVEsExploitedLatest
allure24–Sep 14, 2026

Exploited and recent CVEs

  • CVE-2026-55847 Medium 6.1 Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace rendering 0.3%
  • CVE-2026-55846 Medium 6.2 Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read 0.2%
  • CVE-2026-33166 High 8.6 Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers) 0.6%
  • CVE-2025-52888 High 7.5 Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction 0.4%