Skip to content
OpenAdvisories

Vendor

huginn

2 known vulnerabilities.

Products

huginn 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-123094

    Huginn before 2026.11.05 Stored XSS via OAuth Service Display Name

    Huginn before 2026.11.05 contains a stored cross-site scripting vulnerability in the service_label helper that marks unescaped OAuth service display names as html_safe. Authenticated attackers can connect an OAuth account with a crafted nickname, name or emai…

    huginn huginn