Skip to content

Voxel51 Fiftyone vulnerabilities

voxel51 fiftyoneFiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field DescriptionCVE-2026-804267.0 HighAugust 26, 2026
voxel51 fiftyoneFiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server dataCVE-2026-53656Fix available6.3 MediumJuly 15, 2026