Skip to content
OpenAdvisories

Vendor

openVESSL

2 known vulnerabilities.

Products

Anchorr 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-32891

    Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS

    Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server. Versions 1.4.1 and below contain a stored XSS vulnerability in the Jellyseerr user selector. Jellyseerr allows any account holder t…

    openVESSL Anchorr
  • Critical 9.7
    CVE-2026-32890

    Anchorr: Stored XSS in User Mapping dropdown allows unprivileged Discord users to exfiltrate all secrets via /api/config

    Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server. In versions 1.4.1 and below, a stored Cross-site Scripting (XSS) vulnerability in the web dashboard's User Mapping dropdown allows …

    openVESSL Anchorr