Markusproject

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 8
    Known Exploited: 0
    1
    Critical Level Threats
    3
    High Level Threats
    4
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-25962

    MarkUs: Zip bomb in config upload enables DoS

    Last Modified: Apr 17, 2026
    Published: Mar 06, 2026

    CVE-2026-27807

    MarkUs: YAML alias (‘billion laughs’) DoS in config upload

    Last Modified: Apr 18, 2026
    Published: Mar 06, 2026

    CVE-2026-28405

    MarkUs: Stored XSS in Submission HTML Preview Enables Instructor-Context Actions

    Last Modified: Apr 16, 2026
    Published: Mar 05, 2026

    CVE-2026-25057

    Zip Slip in MarkUs config upload allowing RCE

    Last Modified: Apr 17, 2026
    Published: Feb 09, 2026

    CVE-2026-24900

    MarkUs has a submission-view IDOR exposes all student submissions

    Last Modified: Apr 18, 2026
    Published: Feb 09, 2026
    Items Per Page
    Markusproject Vulnerabilities & Security CVEs | CVE-DB