homarr kayıtları
homarr üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %12,5
- Silahlaştırılmış
- 1 · %12,5
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- 187 gün
Tekrar eden sınıflar
- CWE-20 Improper Input Validation2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-506 Embedded Malicious Code1
- CWE-87 Improper Neutralization of Alternate XSS Syntax1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
62Bu hafta | CVE-2025-54313Silahlaştırılmış | eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise.prettier · eslint-config-prettier · CWE-506 | Yüksek7,5 | KEV | %5,1 | 19 Tem 2025 |
36İzleyin | CVE-2025-67493İstismar yok | Homarr: missing input sanitization and possible privilege escalation through ldap search query injectionhomarr · homarr · CWE-20 | Kritik9,0 | — | %0,3 | 17 Ara 2025 |
35İzleyin | CVE-2026-33510İstismar yok | DOM-Based XSS in Homarr /auth/login Redirecthomarr · homarr · CWE-87 | Yüksek8,8 | — | %0,2 | 6 Nis 2026 |
30İzleyin | CVE-2026-27796Kavram kanıtı | Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak)homarr · homarr · CWE-200 | Yüksek7,5 | — | %1,1 | 7 Mar 2026 |
24İzleyin | CVE-2025-64759İstismar yok | Homarr is Vulnerable to Stored Cross-Site Scripting (XSS) and Possible Privilege Escalation via Malicious SVG Uploadhomarr · homarr · CWE-20 | Orta6,1 | — | %0,3 | 19 Kas 2025 |
21İzleyin | CVE-2026-27797İstismar yok | Homarr: Unauthenticated SSRF in rssFeed.tshomarr · homarr · CWE-918 | Orta5,3 | — | %0,4 | 7 Mar 2026 |
21İzleyin | CVE-2026-25123İstismar yok | Homarr affected by Unauthenticated SSRF / Port-Scan Primitive via widget.app.pinghomarr · homarr · CWE-918 | Orta5,3 | — | %0,2 | 6 Şub 2026 |
16İzleyin | CVE-2026-32602İstismar yok | Homarr has a Race Condition in Invite Token Registration (TOCTOU)homarr · homarr · CWE-367 | Orta4,2 | — | %0,1 | 6 Nis 2026 |
- CVE-2025-5431362Bu hafta
eslint-config-prettier 8.10.1, 9.1.1, 10.1.6, and 10.1.7 has embedded malicious code for a supply chain compromise.
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %5prettier · eslint-config-prettier19 Tem 2025
- CVE-2025-6749336İzleyin
Homarr: missing input sanitization and possible privilege escalation through ldap search query injection
KritikCVSS 9,0İstismar yokEPSS %0homarr · homarr17 Ara 2025
- CVE-2026-3351035İzleyin
DOM-Based XSS in Homarr /auth/login Redirect
YüksekCVSS 8,8İstismar yokEPSS %0homarr · homarr6 Nis 2026
- CVE-2026-2779630İzleyin
Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak)
YüksekCVSS 7,5Kavram kanıtıEPSS %1homarr · homarr7 Mar 2026
- CVE-2025-6475924İzleyin
Homarr is Vulnerable to Stored Cross-Site Scripting (XSS) and Possible Privilege Escalation via Malicious SVG Upload
OrtaCVSS 6,1İstismar yokEPSS %0homarr · homarr19 Kas 2025
- CVE-2026-2779721İzleyin
Homarr: Unauthenticated SSRF in rssFeed.ts
OrtaCVSS 5,3İstismar yokEPSS %0homarr · homarr7 Mar 2026
- CVE-2026-2512321İzleyin
Homarr affected by Unauthenticated SSRF / Port-Scan Primitive via widget.app.ping
OrtaCVSS 5,3İstismar yokEPSS %0homarr · homarr6 Şub 2026
- CVE-2026-3260216İzleyin
Homarr has a Race Condition in Invite Token Registration (TOCTOU)
OrtaCVSS 4,2İstismar yokEPSS %0homarr · homarr6 Nis 2026