Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Morelitea vulnerabilities

3 published CVEs name Morelitea among the affected products.

Newest CVEs

  • CVE-2026-28276

    Initiative Allows Unauthenticated Access to Uploaded Documents via Public /uploads/ Endpoint

    Morelitea · initiative

    High7.5
  • CVE-2026-28275

    Initiative Vulnerable to Improper Session Invalidation (JWT Remains Valid)

    Morelitea · initiative

    High8.1
  • CVE-2026-28274

    Initiative Vulnerable to Token Theft via Stored XSS in Document Uploads

    Morelitea · initiative

    High8.7