Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Voxel51
Voxel51 vulnerabilities
Products
Fiftyone
2
Newest
voxel51
fiftyone
FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description
CVE-2026-80426
7.0
High
August 26, 2026
voxel51
fiftyone
FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
CVE-2026-53656
Fix available
6.3
Medium
July 15, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open