Pivotick vulnerabilities
We track 3 vulnerabilities in Pivotick products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 28, 2026.
Latest Pivotick vulnerabilities
- 9.2 Critical severity
pivotick: Improper Neutralization of Input During Web Page Generation
Pivotick contains a DOM-based cross-site scripting vulnerability in its generic UI element resolution and icon-rendering utilities. The tryResolveHTMLElement function treated any resolved string as HTML markup by assigning it to a <template> element through in
- 8.2 High severity
Pivotick: Uncontrolled Resource Consumption
Pivotick contains an uncontrolled-recursion vulnerability when processing caller-supplied graph and node data. The affected graph algorithms recursively traversed graph edges, while the JSON viewer recursively processed each level of a node’s data structure. A
- 8.2 High severity
pivotick: Improper Neutralization of Input During Web Page Generation
Pivotick fails to sanitize attacker-controlled SVG markup supplied through the per-node style.svgIcon property before inserting it into the document. When rendering a graph node, the vulnerable code assigns the SVG icon markup directly to the innerHTML propert