Pigeon vulnerabilities

1 known vulnerability in Pigeon from Kasuganosoras. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Pigeon: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-32616Mar 16, 2026Kasuganosoras

  Pigeon is a message board/notepad/social system/blog. Prior to 1.0.201, the application uses $_SERVER['HTTP_HOST'] without validation to construct email verification URLs in the register and resendmail flows. An attacker can manipulate the Host header in the H