daggerhart
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| OpenID Connect Generic Client | 2 | – | Dec 18, 2025 |
| Query Wrangler | 1 | – | Aug 16, 2026 |
Exploited and recent CVEs
- CVE-2026-14498 Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution via 'options' Parameter 1.0%
- CVE-2025-13730 OpenID Connect Generic Client <= 3.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.2%
- CVE-2021-24214 OpenID Connect Generic Client 3.8.0-3.8.1 - Reflected Cross Site Scripting (XSS) via Login Error 1.6%