webrecorder
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| browsertrix | 1 | – | Sep 17, 2026 |
| wabac.js | 1 | – | Sep 9, 2025 |
Exploited and recent CVEs
- CVE-2026-54501 Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors 1.2%
- CVE-2025-58765 wabac.js has XSS vulnerability in 404 error handling logic 0.3%