Skip to content
OpenAdvisories

Vendor

klembot

1 known vulnerabilities.

Products

twinejs 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-105220

    Twine 2 Desktop through 2.12.0 Arbitrary Code Execution via Imported Story Files

    Twine 2 desktop through 2.12.0 contains a cross-site scripting vulnerability in importStories() that executes markup from imported story files in the editor window. Attackers can craft a story file whose script calls the twineElectron openWithScratchFile IPC …

    klembot twinejs