yuzutech kroki vulnerabilities in 2025, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 8.7CVE-2025-14896EPSS 0.3%
due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker can craft a malicious Vega diagram specification that will allow them to send requests to any URL, in…