Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

vas3k vulnerabilities

5 published CVEs name vas3k among the affected products.

Newest CVEs

  • CVE-2026-125749

    TaxHacker through 0.8.5 IDOR via Settings Server Actions userId

    vas3k · TaxHacker

    Low2.3
  • CVE-2026-94040

    vas3k TaxHacker actions.ts testLLMProviderAction server-side request forgery

    vas3k · TaxHacker

    Medium6.9
  • CVE-2026-94039

    vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgery

    vas3k · TaxHacker

    Medium6.9
  • CVE-2026-78062

    vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials

    vas3k · TaxHacker

    Medium6.9
  • CVE-2026-78061

    vas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery

    vas3k · TaxHacker

    Medium5.3