Vulnerabilidades do Cmu Cveclient

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Cmu Cveclient: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:cmu:cveclient

CVE-2026-35467 Alta · 7.5 CWE-522 02/04/2026

Private Key stored as extractable in browser IndexeDB

The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.

CVE-2026-35466 Média · 6.1 CWE-79 02/04/2026

Stored XSS via unsanitized input from remote service

XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services