Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

pivotick vulnerabilities

8 published CVEs name pivotick among the affected products.

Newest CVEs

  • CVE-2026-67174

    DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick

    pivotick · pivotick

    Critical9.2
  • CVE-2026-67173

    Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests

    pivotick · pivotick

    Medium5.1
  • CVE-2026-66922

    Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service

    pivotick · pivotick

    Medium5.1
  • CVE-2026-66921

    Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References

    pivotick · pivotick

    Medium6.3
  • CVE-2026-66920

    Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data

    Pivotick · Pivotick

    High8.2
  • CVE-2026-66919

    Stored DOM-Based Cross-Site Scripting in Node Modal Headers

    Pivotick · Pivotick

    Medium6.9
  • CVE-2026-66918

    DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons

    pivotick · pivotick

    High8.2
  • CVE-2026-66825

    Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links

    pivotick · pivotick

    Medium6.9