Advisories · Technology

valhalla.

Every CVE that names valhalla among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54716 CVE record

CVSS 7.5 High

Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OOM in /sources_to_targets
- valhalla
- Denial of service
Not analysed yet 17 Sept 2026
CVE-2026-49294 CVE record

CVSS 6.1 Medium

Valhalla has reflected XSS via unsanitized JSONP callback parameter
- valhalla
- Cross-site scripting (XSS)
Not analysed yet 15 Jun 2026