PE
Product
penpot
20
CVEs
0
On KEV
9.9
Max CVSS
12
New 30D
Severity mix
Critical 2High 6Medium 12Low 0
Watch
Add penpot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105691 | 9.9 | Oct 5 | Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color Affected: < 2.18.0 |
| CVE-2026-44986 | 9.9 | Jul 15 | Penpot: Pre-authenticated account takeover via team-invitation token + prepare-register-profile Affected: < 2.14.5 |
Showing 2