Skip to content
OpenAdvisories

Vendor

fastschema

3 known vulnerabilities.

Products

fastschema 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-72583

    fastschema - Stored Cross-Site Scripting via MIME Type Bypass in File Upload

    A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check.

    fastschema fastschema