LO
Product
lookyloo
7
CVEs
0
On KEV
9.4
Max CVSS
1
New 30D
Severity mix
Critical 2High 0Medium 5Low 0
Watch
Add lookyloo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55835 New | 6.9 | Oct 23 | Lookyloo: Potential sub-system DoS due to parameter missmatch in notification Affected: < 1.39.4 |
| CVE-2026-66913 | 6.9 | Jul 28 | Zip Bomb in Lookyloo Capture Upload Allows Denial of Service Affected: through 1.40.0 |
| CVE-2025-66460 | 6.1 | Dec 2 | Lookyloo vulnerable to XSS due to lack of escaping in HTML elements passed to Datatables Affected: < 1.35.3 |
| CVE-2025-66459 | 6.1 | Dec 2 | Lookyloo vulnerable to XSS due to unescaped error message passed to innerHTML Affected: < 1.35.3 |
| CVE-2025-66458 | 6.1 | Dec 2 | Lookyloo has multiple XSS due to unsafe use of f-strings in Markup Affected: < 1.35.3 |
Showing 5