Allure-Framework Allure2
4 CVEs affecting Allure-Framework Allure2. Latest disclosed: 2026-09-14. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-33166 | High | 8.6 | 2026-03-20 | Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. The Allure report generator prior to version 2.38.0 is vulnerable to… |
CVE-2025-52888 | High | 7.5 | 2025-06-24 | Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity (XXE) vulnerability exists in the xun… |
CVE-2026-55846 | Medium | 6.2 | 2026-09-14 | Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the HTTP server started by allure serve and allure… |
CVE-2026-55847 | Medium | 6.1 | 2026-09-14 | Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. Prior to 2.39.0, the ansi.js helper at allure-generator/src/main/jav… |