cadwyn vulnerabilities

1 known vulnerability in cadwyn from Zmievsa. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  cadwyn: Improper Neutralization of Input During Web Page Generation

  CVE-2025-53528Jul 21, 2025Zmievsa

  Cadwyn creates production-ready community-driven modern Stripe-like API versioning in FastAPI. In versions before 5.4.3, the version parameter of the "/docs" endpoint is vulnerable to a Reflected XSS (Cross-Site Scripting) attack. This XSS would notably allow