Advisories · Technology

lissy93 dashy.

Every CVE that names lissy93 dashy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54443 CVE record

CVSS 5.9 Medium

Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
- lissy93 dashy
- Cross-site scripting (XSS)
- CWE-84
Not analysed yet 15 Jul 2026
CVE-2026-46485 CVE record

CVSS 8.2 High

Dash: Users can write to config despire permissions (OIDC tested)
- lissy93 dashy
- Broken access control
- Authentication bypass
Not analysed yet 15 Jul 2026
CVE-2026-55592 CVE record

CVSS 3.9 Low

Dashy: XSS in workspace url parameter
- lissy93 dashy
- Cross-site scripting (XSS)
Not analysed yet 7 Jul 2026
CVE-2023-5916 CVE record

CVSS 4.3 Medium

Lissy93 Dashy Configuration save access control
- Lissy93 Dashy
- Broken access control
Not analysed yet 2 Nov 2023