vapor leaf-kit vulnerabilities
3 published CVEs name vapor leaf-kit among the affected products.
- 3Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-28499
LeafKit's HTML escaping may be skipped for Collection values, enabling XSS
vapor · leaf-kit
Medium6.9 - CVE-2026-27120
Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster
vapor · leaf-kit
Medium6.1 - CVE-2021-37634
LeafKit allows XSS with untrusted user input
vapor · leaf-kit
High7.4