CR
Product
Cronicle
4
CVEs
0
On KEV
9.0
Max CVSS
2
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch
Add Cronicle to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55562 | 9.0 | Oct 13 | Cronicle: Stored XSS in admin Activity Log via account full_name field Affected: < 0.9.119 |
| CVE-2026-58255 New | 8.8 | Oct 27 | Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401 Affected: < 0.9.121 |
| CVE-2026-39400 | 6.1 | Apr 7 | Stored XSS via Job HTML/Table Output in Cronicle Affected: < 0.9.111 |
| CVE-2026-39401 | 5.4 | Apr 7 | Privilege Escalation via update_event Job Output in Cronicle Affected: < 0.9.111 |
Showing 4