Skip to content
OpenAdvisories

Vendor

blueprintue

10 known vulnerabilities.

Products

blueprintue-self-hosted-edition 10
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2026-126814

    blueprintUE Self-Hosted Edition before 4.3.6 Arbitrary Iframe Embedding via PeerTube Matcher

    blueprintUE Self-Hosted Edition before 4.3.6 contains an iframe injection vulnerability that allows authenticated users to embed arbitrary third-party content by abusing the PeerTube video URL matcher in BlueprintService::findVideoProvider(). Attackers can se…

    blueprintue blueprintue-self-hosted-edition
  • Low 3.7
    CVE-2026-121735

    blueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation Tokens

    blueprintUE self-hosted edition before 4.3.4 contains an insufficient session expiration vulnerability that allows attackers to confirm accounts using stale tokens because UserModel::findUserIDWithConfirmedToken ignores confirmed_sent_at. Attackers who obtain…

    blueprintue blueprintue-self-hosted-edition