karakeep-app

Products

ProductCVEsExploitedLatest
karakeep4–Aug 18, 2026

Exploited and recent CVEs

  • CVE-2026-75774 Low 3.7 karakeep-app karakeep OAuth Sign-In auth.ts improper authentication 0.6%
  • CVE-2026-75773 Low 3.7 karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication 0.7%
  • CVE-2026-45082 High 7.6 Karakeep has a SSRF Protection Bypass via Redirect Handling 0.3%
  • CVE-2026-27627 High 8.2 Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSS 0.4%