voxel51
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| fiftyone | 2 | – | Aug 26, 2026 |
Exploited and recent CVEs
- CVE-2026-80426 FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description 0.4%
- CVE-2026-53656 FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data 0.1%