Skip to content

Jiangweifang Live2dwebcanvas vulnerabilities

jiangweifang live2dwebcanvasLive2DWebCanvas <= 2.2.1 - Unauthenticated Arbitrary File Upload via 'modelApi' ParameterCVE-2026-928958.1 HighNovember 6, 2026
jiangweifang live2dwebcanvasLive2DWebCanvas <= 1.9.11 - Authenticated (Subscriber+) Arbitrary File DeletionCVE-2024-137678.1 HighJanuary 31, 2025