lichess-org
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| lila | 2 | – | Oct 14, 2026 |
Exploited and recent CVEs
- CVE-2026-103974 lichess.org: Stored HTML Injection via PGN Annotator Tag in Studies 0.2%
- CVE-2026-35208 lichess.org has an Unsanitized Stream Title Injection on /streamer 0.3%