diced vulnerabilities
27 published CVEs name diced among the affected products.
- 27Published CVEs27 of them scored
- 27Last 12 monthspublished in the last year
- 3Critical8 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-58404
Zipline 3.4.5 before 3.7.10 Path Traversal via user export endpoint
diced · zipline
High8.3 - CVE-2024-58405
Zipline through 3.7.9 Invite Bypass via /api/auth/register Endpoint
diced · zipline
High8.8 - CVE-2025-71459
Zipline through 4.3.2 Path Traversal via x-zipline-filename Header
diced · zipline
High7.2 - CVE-2025-71460
Zipline before 4.2.1 Missing Ownership Check via /api/user/files/transaction
diced · zipline
Low2.3 - CVE-2025-71461
Zipline before 4.0.2 Predictable Filenames via Math.random State Recovery
diced · zipline
Medium6.9 - CVE-2025-71462
Zipline before 3.7.12 XSS via url parameter on login page
diced · zipline
Medium5.1 - CVE-2026-126936
Zipline before 4.7.0 Race Condition in Invite and Quota Limits
diced · zipline
Medium6.0 - CVE-2026-126937
Zipline before 4.6.5 TOCTOU Race Condition via /api/setup
diced · zipline
Critical9.2 - CVE-2026-126938
Zipline before 4.6.4 Upload Quota Bypass via Forged Content-Range Headers
diced · zipline
High7.1 - CVE-2026-126939
Zipline before 4.6.4 Unauthenticated File Listing via page Query Parameter
diced · zipline
Medium6.9