Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

2 matching records.

1. 34
   CVE NVD 4h ago

   Kroki creates diagrams from textual descriptions.

   Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request…

   CVSS 5.0 Fix available CVE-2026-102356 Yuzutech Browser
2. 30
   CVE NVD 4h ago

   Kroki creates diagrams from textual descriptions.

   Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKI_SAFE_MODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including…

   CVSS 7.5 Fix available CVE-2026-102359 Yuzutech

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Yuzutech&limit=100. RSS for this section: feed.xml.