Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

OpenListTeam vulnerabilities

7 published CVEs name OpenListTeam among the affected products.

Published CVEs
7
Last 12 months
6
Critical
0
Known exploited
0

Critical 0High 3Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20251
  2. 20266

Newest CVEs

  • CVE-2026-102663

    OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search

    OpenListTeam · OpenList

    Medium4.3
  • CVE-2026-75602

    OpenList: Authenticated arbitrary file write via Content-Disposition path traversal in SimpleHttp offline-download tool

    OpenListTeam · OpenList

    Medium6.5
  • CVE-2026-69160

    OpenList: Arbitrary File Read via Path Prefix Confusion in Share Creation API

    OpenListTeam · OpenList

    Medium6.5
  • CVE-2026-73509

    OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal

    OpenListTeam · OpenList

    High7.6
  • CVE-2026-25060

    OpenList Insecure TLS Default Configuration

    OpenListTeam · OpenList

    High8.1
  • CVE-2026-25059

    OpenList affected by Path Traversal in file copy and remove handlers

    OpenListTeam · OpenList

    High8.8
  • CVE-2025-50183

    OpenList (frontend) allows XSS Attacks in the built-in Markdown Viewer

    OpenListTeam · OpenList

    Medium6.5