perber

Products

ProductCVEsExploitedLatest
leafwiki4–Aug 25, 2026

Exploited and recent CVEs

  • CVE-2026-80189 Medium 6.5 LeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction 0.5%
  • CVE-2026-53529 Medium 4.8 LeafWiki vulnerable to stored XSS via search-result title (highlight() returns raw title into dangerouslySetInnerHTML) 0.4%
  • CVE-2026-53528 High 8.8 FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter 0.5%
  • CVE-2026-53527 High 8.8 LeafWiki Vulnerable to Privilege Escalation via User Self-Service Update 0.4%