Circl vulnerabilities

Products

• Vulnerability-lookup 11
• Ail Framework 2

Newest

• circl vulnerability-lookup Vulnerability-Lookup: memory amplification through webhook payload template format specifiers CVE-2026-123660 5.3 MediumNovember 6, 2026
• circl vulnerability-lookup Vulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password Takeover CVE-2026-101041 6.3 MediumSeptember 27, 2026
• circl vulnerability-lookup Stored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookup CVE-2026-73432 5.1 MediumAugust 12, 2026
• circl vulnerability-lookup Reusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookup CVE-2026-73431 8.8 HighAugust 12, 2026
• circl vulnerability-lookup Authorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookup CVE-2026-73405 5.3 MediumAugust 12, 2026
• circl vulnerability-lookup Stored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup CVE-2026-73374 6.1 MediumAugust 12, 2026
• circl ail framework, ail-project ail-framework +1 more Stored XSS in modal item preview for long item content in AIL Framework CVE-2026-39416 8.5 HighApril 8, 2026
• circl vulnerability-lookup CSRF vulnerability in CIRCL Vulnerability-Lookup CVE-2025-42620 8.3 HighDecember 8, 2025
• circl vulnerability-lookup CSRF vulnerability in CIRCL Vulnerability-Lookup CVE-2025-42616 7.0 HighDecember 8, 2025
• circl vulnerability-lookup Improper Restriction of Excessive Authentication Attempts vulnerability in CIRCL Vulnerability-Lookup CVE-2025-42615 8.1 HighDecember 8, 2025
• circl vulnerability-lookup vulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a... CVE-2025-60249 6.4 MediumSeptember 25, 2025
• circl vulnerability-lookup Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py. CVE-2025-32413 6.4 MediumApril 8, 2025
• circl pandora workers/extractor.py in Pandora (aka pandora-analysis/pandora) 1.3.0 allows a denial of service... CVE-2023-22898 6.5 MediumJanuary 10, 2023
• circl cve-search lib/DatabaseLayer.py in cve-search before 4.1.0 allows regular expression injection, which can... CVE-2021-45470 7.5 HighDecember 23, 2021
• circl ail framework Global.py in AIL framework 2.8 allows path traversal. CVE-2020-8545 7.5 HighFebruary 3, 2020