Skip to content

voxel51 fiftyone

CVE-2026-80426 High 7.1 FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description 0.4%
CVE-2026-53656 Medium 6.3 FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data 0.1%