Known vulnerabilities

2 known vulnerabilities in Known from Withknown. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  idno: Server-Side Request Forgery

  CVE-2026-28508Mar 6, 2026Idno

  Idno is a social publishing platform. Prior to version 1.6.4, a logic error in the API authentication flow causes the CSRF protection on the URL unfurl service endpoint to be trivially bypassed by any unauthenticated remote attacker. Combined with the absence

• 7.2 High severity

  idno: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-28507Mar 6, 2026Idno

  Idno is a social publishing platform. Prior to version 1.6.4, there is a remote code execution vulnerability via chained import file write and template path traversal. This issue has been patched in version 1.6.4.