roadiz
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| core-bundle-dev-app | 2 | – | May 8, 2026 |
Exploited and recent CVEs
- CVE-2026-42206 Roadiz OpenID Connect nonce generated but never validated — ID token replay attack 0.2%
- CVE-2026-33486 Roadiz has Server-Side Request Forgery (SSRF) in roadiz/documents 0.4%