CyberSecBulletin

Tock vulnerabilities

We track 1 vulnerability in Tock products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2025.

1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score

Latest Tock vulnerabilities

  • 7.1 High severity

    Tock Widget: Cross-Site Request Forgery

    CVE-2025-22520Tock

    Cross-Site Request Forgery (CSRF) vulnerability in Tock Tock Widget tock-widget allows Cross Site Request Forgery.This issue affects Tock Widget: from n/a through <= 1.1.