https://github.com/ShadowBlip vulnerabilities
We track 2 vulnerabilities in https://github.com/ShadowBlip products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on January 14, 2026.
2vulnerabilities
0critical
2high
0exploited
8.5average CVSS score
Latest https://github.com/ShadowBlip vulnerabilities
- 8.5 High severity
inputplumber: Incorrect Authorization
Lack of authorization of the InputManager D-Bus interface in InputPlumber versions before v0.63.0 can lead to local Denial-of-Service, information leak or even privilege escalation in the context of the currently active user session.
- 8.5 High severity
inputplumber: Improper Access Control
Polkit authentication dis isabled by default and a race condition in the Polkit authorization check in versions before v0.69.0 can lead to the same issues as in CVE-2025-66005.