Products: 2
Vulnerabilities: 20
Known Exploited: 0
2
Critical Level Threats
6
High Level Threats
10
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-105696
Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC command
Last Modified: Oct 06, 2026
Published: Oct 05, 2026
CVE-2026-105695
Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session
Last Modified: Oct 05, 2026
Published: Oct 05, 2026
CVE-2026-105694
Penpot: Stored XSS via Unsanitised SVG Uploads
Last Modified: Oct 08, 2026
Published: Oct 05, 2026
CVE-2026-105693
Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle
Last Modified: Oct 06, 2026
Published: Oct 05, 2026
CVE-2026-105692
Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create
Last Modified: Oct 06, 2026
Published: Oct 05, 2026
Items Per Page
