Skip to content
OpenAdvisories

Vendor

HumanSignal

17 known vulnerabilities.

Products

label-studio 16 label-studio-sdk 1 label-studio-ml-backend 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2025-25296 Public exploit Scanner template

    Label Studio allows Cross-Site Scripting (XSS) via GET request to `/projects/upload-example` endpoint

    Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's `/projects/upload-example` endpoint allows injection of arbitrary HTML through a `GET` request with an appropriately crafted `label_config` query parameter. By crafting…

    HumanSignal label-studio label-studio PyPI