Corebunch

2 CVEs in 1 Corebunch product, including Instatic. Newest: CVE-2026-121458 (2026-11-03). Severity, EPSS and public exploits for each.

Corebunch products with known CVEs

ProductCVEs
Instatic2
Corebunch CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-121458Medium6.52026-11-03Instatic before 0.0.21 contains a missing authorization vulnerability in its AI/MCP content read tools that allows low-privileged authenticated users with ai.c…
CVE-2026-72587Medium6.12026-08-10A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache b…