Recent Advisories
| Severity | ID | Title | Vendor | Product | Date | Type |
|---|---|---|---|---|---|---|
| MEDIUM 5.3 | CVE-2026-55455 |
Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist_CVE-2026-55455Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the outbound HTTP host filter applied by WebClientUtils... |
appsmithorg | appsmith < 2.1 | CVE | |
| CRITICAL 9.9 | CVE-2026-55454 |
Appsmith: Caddy admin API exposed without authentication_CVE-2026-55454Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's admin API — which has... |
appsmithorg | appsmith < 2.1 | CVE | |
| HIGH 8.7 | CVE-2026-54759 |
SiYuan: Lute HTML sanitizer allows ` |