Advisories · Technology
karakeep.
Every CVE that names karakeep among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
karakeep-app karakeep OAuth Sign-In auth.ts improper authentication
- karakeep
- Authentication bypass
- CVSS 6.3 Medium
karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication
- karakeep
- Authentication bypass
- CWE-799
- CVSS 7.6 High
Karakeep has a SSRF Protection Bypass via Redirect Handling
- karakeep
- Server-side request forgery (SSRF)
- CVSS 8.2 High
Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSS
- karakeep
- Cross-site scripting (XSS)