github.com/umputun/remark42
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/umputun/remark42page 1 of 1
- CVE-2026-48788HIGHCVSS 8.2EG 8.2fixed in 1.16.02026-06-17
Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. Versions 1.6.0 through 1.15.0 contain a Cross-Site Scripting (XSS) vulnerability exploitable through content-type spoofing. Th…
- CVE-2026-77463MEDIUMCVSS 6.5EG 6.52026-11-05
Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. From 1.0.0 until 1.16.2, Remark42 globally trusts True-Client-IP, X-Real-IP, and X-Forwarded-For without verifying that the di…
Check whether github.com/umputun/remark42 is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/umputun/remark42 CVEs against the assets you own.
Book a Demo →