VendorsVaporleafkitall versions
Vulnerabilities

Vapor Leafkit

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2021-37634
LeafKit allows XSS with untrusted user input
Published 2021-08-09 · Modified
7.4EPSS 0.007
CVE-2026-28499
LeafKit's HTML escaping may be skipped for Collection values, enabling XSS
Published 2026-03-18 · Analyzed
6.9EPSS 0.003
CVE-2026-27120
Leaf-kit html escaping does not work on characters that are part of extended grapheme cluster
Published 2026-02-20 · Analyzed
6.1EPSS 0.003