Cmu Cveclient vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Cmu Cveclient: 2 record(s), with affected versions and fixes.
cpe:2.3:a:cmu:cveclient

CVE-2026-35467 High · 7.5 CWE-522 Apr 2, 2026

Private Key stored as extractable in browser IndexeDB

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

CVE-2026-35466 Medium · 6.1 CWE-79 Apr 2, 2026

Stored XSS via unsanitized input from remote service

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services