CE
Product
cervantes
6
CVEs
0
On KEV
7.1
Max CVSS
4
New 30D
Severity mix
Critical 0High 1Medium 5Low 0
Watch
Add cervantes to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-115975 New | 7.1 | Oct 24 | Broken access control in JiraController Affected: alpha 0.3 through 1.3-beta |
| CVE-2026-115993 New | 6.8 | Oct 24 | Stored XSS in the “Notes” field of project checklists Affected: alpha 0.3 through 1.3-beta |
| CVE-2026-115994 New | 5.4 | Oct 24 | BOLA Allows Cross-Project Target Tampering Affected: alpha 0.3 through 1.3-beta |
| CVE-2024-42054 | 5.4 | Jul 28 | Cervantes through 0.5-alpha accepts insecure file uploads Affected: 0.3; 0.4; 0.5 |
| CVE-2024-42055 | 5.4 | Jul 28 | Cervantes through 0.5-alpha allows stored XSS Affected: 0.3; 0.4; 0.5 |
| CVE-2026-115998 New | 4.3 | Oct 24 | IDOR: User reads and modifies findings from other people's projects Affected: alpha 0.3 through 1.3-beta |
Showing 6