getpocket

Products

ProductCVEsExploitedLatest
Pocket1–Aug 28, 2026

Exploited and recent CVEs

  • CVE-2026-82090 Critical 9.2 Pocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM.  JavaScript code can alter the application state via native bridge methods. 0.4%