yuzutech
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| kroki | 1 | – | Dec 18, 2025 |
Exploited and recent CVEs
- CVE-2025-14896 due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker can craft a malicious Vega diagram specification that will all 0.3%