Login Request a demo
AC
Product
activepieces
by activepieces · last CVE Aug 11, 2026
8
CVEs
0
On KEV
9.3
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 2Medium 5Low 0
Severity
All severities8Critical1High2Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add activepieces to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-48499
9.3
0%
Jul 30
Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache
Affected: < 0.84.0
CVE-2026-73081
8.7
1%
Aug 11
Activepieces: Remote Code Execution via Command Injection in Code Step Name
Affected: < 0.80.0
CVE-2026-73083
7.6
0%
Aug 11
Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading
Affected: < 0.80.0
CVE-2026-12813
6.3
0%
Jun 21
activepieces File URL file.ts handleUrlFile server-side request forgery
Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +34 more
CVE-2026-73084
6.1
0%
Aug 11
Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint
Affected: < 0.83.0
CVE-2026-53535
5.9
1%
Jul 16
Activepieces: Arbitrary file write in git-sync via path traversal and symlinks
Affected: < 0.82.0
CVE-2026-73082
5.3
0%
Aug 11
Activepieces: Server-side request forgery in MCP tool validation endpoint
Affected: < 0.82.0
CVE-2026-53536
5.3
0%
Jul 16
Activepieces: Cross-tenant file download via missing JWT audience check on step-files signed URL
Affected: < 0.83.0
Showing 8