Vendorslocalhost labskarakeepall versions
Vulnerabilities

localhost labs Karakeep

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

1CVEs
CVE-2026-27627
Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSS
Published 2026-02-25 · Analyzed
8.2EPSS 0.004