CyberSecBulletin

Lissy93 vulnerabilities

We track 2 vulnerabilities in Lissy93 products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 15, 2026.

2vulnerabilities
1critical
1high
0exploited
8.8average CVSS score

Latest Lissy93 vulnerabilities

  • 8.2 High severity

    dashy: External Control of System or Configuration Setting

    CVE-2026-46485Lissy93

    Dashy is a self-hostable personal dashboard. Prior to 4.0.8, Dashy deployments using OIDC can allow unauthenticated users or non-admin authenticated users to write changes to the main config.yaml through the config-saving functionality despite configured permi

  • 9.3 Critical severity

    web-check: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-32778Lissy93EPSS 19.9%

    Web-Check is an all-in-one OSINT tool for analyzing any website. A command injection vulnerability exists in the screenshot API of the Web Check project (Lissy93/web-check). The issue stems from user-controlled input (url) being passed unsanitized into a shell