vapor leaf-kit vulnerabilities

3 published CVEs name vapor leaf-kit among the affected products.

All 3 in the list Atom feed of new CVEs

Published CVEs: 3
Last 12 months: 2
Critical: 0
Known exploited: 0

Critical 0High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

20211
20262

Newest CVEs

CVE-2026-28499
LeafKit's HTML escaping may be skipped for Collection values, enabling XSS
vapor · leaf-kit
Medium6.9
CVE-2026-27120
Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster
vapor · leaf-kit
Medium6.1
CVE-2021-37634
LeafKit allows XSS with untrusted user input
vapor · leaf-kit
High7.4

Most common weaknesses