Kepano CVEs & Vulnerabilities

1 CVEs affecting Kepano products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

defuddle 1

CVE-2026-30830MEDIUM

Defuddle cleans up HTML pages. Prior to version 0.9.0, the _findContentBySchemaText method in src/defuddle.ts interpolates image src and alt attributes directly into an HTML string without escaping. An attacker can use a " in the alt attribute to break out of the attribute context and inject event handler. This issue has been patched in version 0.9.0.

7 Mar 2026

6.1

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database