Skip to content
OpenAdvisories

Vendor

pandora-analysis

5 known vulnerabilities.

Products

pandora 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.0
    CVE-2026-75531

    Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora

    Pandora contains a stored cross-site scripting (XSS) vulnerability in the rendering of URL observables. A URL extracted from or associated with an analyzed file was inserted directly into the inline JavaScript onclick handler used by the Submit to Lookyloo ac…

    pandora-analysis pandora
  • High 8.7
    CVE-2026-74767

    Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb

    Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the re…

    pandora-analysis pandora