Login Request a demo
AL
Product
aliasvault
by aliasvault · last CVE Oct 15, 2026
6
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 3Low 1
Severity
All severities6Critical0High2Medium3Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add aliasvault to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-55587
8.1
0%
Oct 15
AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID
Affected: < 0.29.4
CVE-2025-59344
7.7
0%
Sep 19
AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction
Affected: < 0.23.1
CVE-2026-94621
6.3
0%
Oct 15
AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction
Affected: < 0.30.3
CVE-2026-26266
6.1
0%
Mar 3
AliasVault affected by Cross-Site Scripting (XSS) via Email HTML Rendering
Affected: < 0.26.0
CVE-2026-22694
6.1
0%
Jan 14
AliasVault is Missing Origin Validation in Android Passkey Credential Provider
Affected: >= 0.24.0, < 0.25.3
CVE-2026-2974
2.5
0%
Feb 23
AliasVault App Backup aliasvault.xml backup
Affected: through 0.25.3
Showing 6