Slab

3 CVEs across 2 Slab products. Browse Slab vulnerabilities, severities, and proof-of-concept exploits.

Slab products with known CVEs

ProductCVEs
Quill2
Safeurl1
Slab CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-778662026-09-15Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the lib…
CVE-2025-15056Medium6.12026-01-13A lack of data validation vulnerability in the HTML export feature in Quill in allows Cross-Site Scripting (XSS). This issue affects Quill: 2.0.3.
CVE-2021-3163Medium6.12021-04-12A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attr…