Skip to content
OpenAdvisories

Vendor

karakeep-app

4 known vulnerabilities.

Products

karakeep 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.6
    CVE-2026-45082

    Karakeep has a SSRF Protection Bypass via Redirect Handling

    Karakeep is a elf-hostable bookmark-everything app. A Server-Side Request Forgery (SSRF) protection bypass vulnerability was identified in versions prior to 0.32.0 affecting redirect-following processing components. Although the application implements protect…

    karakeep-app karakeep
  • High 8.2
    CVE-2026-27627

    Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSS

    Karakeep is a elf-hostable bookmark-everything app. In version 0.30.0, when the Reddit metascraper plugin returns `readableContentHtml`, the HTML parsing subprocess uses it directly without running it through DOMPurify. Every other content source in the crawl…

    karakeep-app karakeep