AL
Vendor
aliasvault
9
CVEs
0
On KEV
5
New 30D
Products
AL8.1
aliasvault
aliasvault
6 CVEs0 on KEV2 new
GH6.3
ghcr.io/aliasvault/aliasvault
aliasvault
1 CVEs0 on KEV1 new
GH6.3
ghcr.io/aliasvault/api
aliasvault
1 CVEs0 on KEV1 new
GH6.3
ghcr.io/lanedirt/aliasvault-api
aliasvault
1 CVEs0 on KEV1 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94621 | AL aliasvault aliasvault | 6.3 | Oct 15 | AliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction |
| CVE-2026-55587 | AL aliasvault aliasvault | 8.1 | Oct 15 | AliasVault: Browser extension WebAuthn bridge accepts forged origin/RP ID |
| CVE-2026-26266 | AL aliasvault aliasvault | 6.1 | Mar 3 | AliasVault affected by Cross-Site Scripting (XSS) via Email HTML Rendering |
| CVE-2026-2974 | AL Aliasvault Aliasvault | 2.5 | Feb 23 | AliasVault App Backup aliasvault.xml backup |
| CVE-2026-22694 | AL aliasvault aliasvault | 6.1 | Jan 14 | AliasVault is Missing Origin Validation in Android Passkey Credential Provider |
| CVE-2025-59344 | AL aliasvault aliasvault | 7.7 | Sep 19 | AliasVault Vulnerable to Server-Side Request Forgery via Favicon Extraction |