Vulnerabilities in aliasvault

5 results

CVE-2025-59344HIGHAliasVault Vulnerable to Server-Side Request Forgery via Favicon ExtractionEPSS 0.3%CVE-2026-26266CRITICALAliasVault affected by Cross-Site Scripting (XSS) via Email HTML RenderingEPSS 0.3%CVE-2026-94621MEDIUMAliasVault: Server-Side Request Forgery via DNS rebinding in Favicon ExtractionEPSS 0.2%CVE-2026-55587HIGHAliasVault: Browser extension WebAuthn bridge accepts forged origin/RP IDEPSS 0.1%CVE-2026-22694MEDIUMAliasVault is Missing Origin Validation in Android Passkey Credential ProviderEPSS 0.1%