lud

Products

ProductCVEsExploitedLatest
jsv1–Nov 1, 2026
oaskit1–Aug 3, 2026

Exploited and recent CVEs

  • CVE-2026-117680 Low 2.1 jsv treats regex match budget exhaustion as a non-match, bypassing patternProperties and not 0.2%
  • CVE-2026-66296 Medium 5.1 Reflected XSS in oaskit's default HTML error handler 0.4%