Skip to content
OpenAdvisories

Vendor

jhuckaby

5 known vulnerabilities.

Products

Cronicle 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-39401

    Privilege Escalation via update_event Job Output in Cronicle

    Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, jb child processes can include an update_event key in their JSON output. The server applies this directly to the parent event's stored configuration without…

    jhuckaby Cronicle
  • Medium 5.3
    CVE-2026-39400

    Stored XSS via Job HTML/Table Output in Cronicle

    Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.111, a non-admin user with create_events and run_events privileges can inject arbitrary JavaScript through job output fields (html.content, html.title, table.hea…

    jhuckaby Cronicle