Advisories · Technology
pivotick.
Every CVE that names pivotick among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick
- pivotick
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests
- pivotick
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service
- pivotick
- Prototype pollution
- CVSS 6.3 Medium
Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References
- pivotick
- Cross-site scripting (XSS)
- CVSS 8.2 High
Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data
- Pivotick
- Denial of service
- CVSS 6.9 Medium
Stored DOM-Based Cross-Site Scripting in Node Modal Headers
- Pivotick
- Cross-site scripting (XSS)
- CVSS 8.2 High
DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons
- pivotick
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links
- pivotick
- Cross-site scripting (XSS)