Advisories · Technology

vulnerability-lookup.

Every CVE that names vulnerability-lookup among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-123660 CVE record

CVSS 5.3 Medium

Vulnerability-Lookup: memory amplification through webhook payload template format specifiers
- vulnerability-lookup
- Denial of service
- CWE-1284
Not analysed yet 6 Nov 2026
CVE-2026-101041 CVE record

CVSS 6.3 Medium

Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover
- vulnerability-lookup
- Race condition
- CWE-20
Not analysed yet 27 Sept 2026
CVE-2026-73432 CVE record

CVSS 5.1 Medium

Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup
- vulnerability-lookup
- Server-side request forgery (SSRF)
Not analysed yet 12 Aug 2026
CVE-2026-73431 CVE record

CVSS 8.8 High

Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup
- vulnerability-lookup
- Authentication bypass
Not analysed yet 12 Aug 2026
CVE-2026-73405 CVE record

CVSS 5.3 Medium

Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup
- vulnerability-lookup
- Broken access control
Not analysed yet 12 Aug 2026
CVE-2026-73374 CVE record

CVSS 6.1 Medium

Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup
- vulnerability-lookup
- Cross-site scripting (XSS)
Not analysed yet 12 Aug 2026
CVE-2026-72761 CVE record

CVSS 6.9 Medium

Webhook SSRF guard bypassed by IPv6 transition addresses (NAT64/6to4/Teredo pass is_global check) in vulnerability-lookup
- vulnerability-lookup
- Server-side request forgery (SSRF)
Not analysed yet 10 Aug 2026