Vulnerabilities in pivotick
8 resultsVexday analysis
A Pivotick apresenta um portfólio reduzido de 6 vulnerabilidades, todas divulgadas recentemente (últimos 90 dias), com 1 crítica e nenhuma em exploração ativa documentada. A fraqueza dominante é XSS (CWE-79), indicando deficiências em validação de entrada em interfaces web, risco típico de aplicações com contato direto com usuários.
CVE-2026-67174CRITICALDOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in PivotickEPSS 0.4%CVE-2026-67173MEDIUMPivotick Unvalidated Node Image URLs Allow Unintended Client-Side RequestsEPSS 0.3%CVE-2026-66922MEDIUMPivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of ServiceEPSS 0.3%CVE-2026-66825MEDIUMCross-Site Scripting via Unsafe URL Schemes in Pivotick Property LinksEPSS 0.3%CVE-2026-66921MEDIUMPivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node ReferencesEPSS 0.3%CVE-2026-66918HIGHDOM-Based Cross-Site Scripting via Unsanitized SVG Node IconsEPSS 0.3%CVE-2026-66919MEDIUMStored DOM-Based Cross-Site Scripting in Node Modal HeadersEPSS 0.3%CVE-2026-66920HIGHPivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph DataEPSS 0.3%