MA
Product
Markus
8
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 4Low 1
Watch
Add Markus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25962 | 6.5 | Mar 6 | MarkUs: Zip bomb in config upload enables DoS Affected: < 2.9.4 |
| CVE-2026-24900 | 6.5 | Feb 9 | MarkUs has a submission-view IDOR exposes all student submissions Affected: < 2.9.1 |
| CVE-2026-28405 | 5.4 | Mar 5 | MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions Affected: < 2.9.1 |
| CVE-2026-27807 | 4.9 | Mar 6 | MarkUs: YAML alias (‘billion laughs’) DoS in config upload Affected: < 2.9.4 |
Showing 4