linkwarden

Products

ProductCVEsExploitedLatest
linkwarden3–May 8, 2026

Exploited and recent CVEs

  • CVE-2026-42455 High 8.8 LinkWarden: Stored XSS via Client-Side Archive Upload (Unsanitized HTML served from same origin) 0.5%
  • CVE-2026-44313 Critical 9.1 LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Function 0.3%
  • CVE-2025-49588 High 8.7 Linkwarden Local File Inclusion Vulnerability 0.5%