Cmu vulnerabilities
We track 1 vulnerability in Cmu products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on April 2, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Cmu vulnerabilities
- 7.5 High severity
cveClient/encrypt-storage.js: Insufficiently Protected Credentials
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.