Cmu Cveclient vulnerabilities

2 vulnerabilities

Known vulnerabilities in Cmu Cveclient, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2026-35467cert/cccveclient/encrypt-storage.js+1
EPSS score
0.27%
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.6.1CVE-2026-35466cert/cccveclient/cveinterface.js+1
EPSS score
0.25%
XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services