Unleash vulnerabilities
7 published CVEs name Unleash among the affected products.
- 7Published CVEs7 of them scored
- 7Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-77426
Unleash: Missing await on permission check + cross-project IDOR in admin API
Unleash · unleash
High7.1 - CVE-2026-77425
Unleash: A project member can reorder activation strategies belonging to any other project / environment (cross-project integrity write), bypassing project RBAC and the audit log
Unleash · unleash
Medium4.3 - CVE-2026-76910
Unleash: Clone-feature lets a user copy a feature from a project they cannot read
Unleash · unleash
Medium5.3 - CVE-2026-76909
Unleash: CR-approval email renders user-controlled raw HTML
Unleash · unleash
Low2.1 - CVE-2026-63466
Unleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username
Unleash · unleash
Medium4.1 - CVE-2026-63462
Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter
Unleash · unleash
High7.5 - CVE-2026-63004
Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers
Unleash · unleash
Medium5.5