CyberSecBulletin

Jsbroks vulnerabilities

We track 3 vulnerabilities in Jsbroks products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 7, 2026.

3vulnerabilities
0critical
3high
0exploited
7.9average CVSS score

Latest Jsbroks vulnerabilities

  • 8.1 High severity

    COCO Annotator: Incorrect Privilege Assignment

    CVE-2026-2109Jsbroks

    A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file /api/undo/ of the component Delete Category Handler. Such manipulation of the argument ID leads to improper authorization. The attack may be laun

  • 7.5 High severity

    COCO Annotator: Improper Resource Shutdown or Release

    CVE-2026-2108Jsbroks

    A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. This impacts an unknown function of the file /api/info/long_task of the component Endpoint. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has

  • 8.1 High severity

    COCO Annotator: Predictable from Observable State

    CVE-2024-10141Jsbroks

    A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1. This affects an unknown part of the component Session Handler. The manipulation of the argument SECRET_KEY leads to predictable from observable state. It is possi