karakeep-app karakeep

• CVE-2026-75774 Low 3.7 karakeep-app karakeep OAuth Sign-In auth.ts improper authentication 0.6%
• CVE-2026-75773 Low 3.7 karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication 0.7%
• CVE-2026-45082 High 7.6 Karakeep has a SSRF Protection Bypass via Redirect Handling 0.3%
• CVE-2026-27627 High 8.2 Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSS 0.4%