Skip to content
OpenAdvisories

Vendor

linkwarden

3 known vulnerabilities.

Products

linkwarden 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-42455

    LinkWarden: Stored XSS via Client-Side Archive Upload (Unsanitized HTML served from same origin)

    Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In versions 2.14.0 and prior, the archive upload endpoint (POST /api/v1/archives/[linkId]?format=4) accepts HTML files (text/html) without sanit…

    linkwarden linkwarden
  • High 8.7
    CVE-2025-49588

    Linkwarden Local File Inclusion Vulnerability

    Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In version 2.10.2, the server accepts links of format file:///etc/passwd and doesn't do any validation before sending them to parsers and playwr…

    linkwarden linkwarden