Skip to content
OpenAdvisories

Vendor

aliasvault

5 known vulnerabilities.

Products

aliasvault 5 ghcr.io/aliasvault/aliasvault 1 ghcr.io/aliasvault/api 1 ghcr.io/lanedirt/aliasvault-api 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-26266

    AliasVault affected by Cross-Site Scripting (XSS) via Email HTML Rendering

    AliasVault is a privacy-first password manager with built-in email aliasing. A stored cross-site scripting (XSS) vulnerability was identified in the email rendering feature of AliasVault Web Client versions 0.25.3 and lower. When viewing received emails on an…

    aliasvault aliasvault