lavish-axi vulnerabilities

1 known vulnerability in lavish-axi from Kunchenguid. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  lavish-axi: External Control of File Name or Path

  CVE-2026-102344Nov 6, 2026Kunchenguid

  Lavish is the new editor for your HTML artifacts. Prior to 0.1.43, the lavish-axi loopback HTTP server did not authenticate requests or validate Host and Origin values on session, artifact, prompt, and polling routes. A website visited while the server is runn