Vulnerabilities in karakeep-app

4 results

CVE-2026-75773MEDIUMkarakeep-app karakeep Login Endpoint auth.ts authorize excessive authenticationEPSS 0.7%CVE-2026-75774MEDIUMkarakeep-app karakeep OAuth Sign-In auth.ts improper authenticationEPSS 0.6%CVE-2026-27627HIGHKarakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSSEPSS 0.4%CVE-2026-45082HIGHKarakeep has a SSRF Protection Bypass via Redirect HandlingEPSS 0.4%