Algernon Project

2 CVEs across 1 Algernon Project products. Browse Algernon Project vulnerabilities, severities, and proof-of-concept exploits.

Algernon Project products with known CVEs

ProductCVEs
Algernon2
Algernon Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-65754Medium6.12025-12-10Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a filename.
CVE-2023-26131Medium5.42023-05-31All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are vulnerable to Cross-site Scr…