Skip to contentCircl Vulnerability-lookup vulnerabilities
- circl vulnerability-lookupVulnerability-Lookup: memory amplification through webhook payload template format specifiersCVE-2026-1236605.3 Medium
- circl vulnerability-lookupVulnerability-Lookup - Race Condition in Account Recovery Token Consumption Allows Password TakeoverCVE-2026-1010416.3 Medium
- circl vulnerability-lookupStored Server-Side Request Forgery in Remote-Instance Synchronization Allows Access to Internal Services in vulnerability-lookupCVE-2026-734325.1 Medium
- circl vulnerability-lookupReusable Account Activation and Recovery Tokens Allow Repeated Account Takeover in vulnerability-lookupCVE-2026-734318.8 High
- circl vulnerability-lookupAuthorization Bypass in SSE Pub/Sub Allows Unconfirmed Accounts to Access Stream Events in vulnerability-lookupCVE-2026-734055.3 Medium
- circl vulnerability-lookupStored Cross-Site Scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookupCVE-2026-733746.1 Medium
- circl vulnerability-lookupCSRF vulnerability in CIRCL Vulnerability-LookupCVE-2025-426208.3 High
- circl vulnerability-lookupCSRF vulnerability in CIRCL Vulnerability-LookupCVE-2025-426167.0 High
- circl vulnerability-lookupImproper Restriction of Excessive Authentication Attempts vulnerability in CIRCL Vulnerability-LookupCVE-2025-426158.1 High
- circl vulnerability-lookupvulnerability-lookup 2.16.0 allows XSS in bundle.py, comment.py, and user.py, by a user on a...CVE-2025-602496.4 Medium
- circl vulnerability-lookupVulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py.CVE-2025-324136.4 Medium