Advisories · Technology

jarun buku.

Every CVE that names jarun buku among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-123201 CVE record

CVSS 6.3 Medium

buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API
- jarun buku
- Server-side request forgery (SSRF)
Not analysed yet 5 Nov 2026
CVE-2026-121627 CVE record

CVSS 5.3 Medium

buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL
- jarun buku
- Cross-site scripting (XSS)
Not analysed yet 3 Nov 2026