allure-framework allure2 vulnerabilities
4 published CVEs name allure-framework allure2 among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55847
Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace rendering
allure-framework · allure2
Medium6.1 - CVE-2026-55846
Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read
allure-framework · allure2
Medium6.2 - CVE-2026-33166
Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers)
allure-framework · allure2
High8.6 - CVE-2025-52888
Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction
allure-framework · allure2
High7.5