Logseq

2 CVEs in 1 Logseq product, including Logseq. Newest: CVE-2026-9279 (2026-06-09). Severity, EPSS and public exploits for each.

Logseq products with known CVEs

ProductCVEs
Logseq2
Logseq CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-92792026-06-09Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts the command name (e.g. `git`, `pandoc`…
CVE-2026-479002026-06-09Logseq is vulnerable to a stored cross-site scripting (XSS). A malicious plugin can include a JavaScript payload in the "name" field of its "package.json" file…