Skip to content
OpenAdvisories

Vendor

pandora-analysis

5 known vulnerabilities.

Products

pandora 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2026-75529

    Stored Cross-Site Scripting via MIME-Type Confusion in PDF Downloads of Pandora

    Pandora is affected by a stored cross-site scripting vulnerability in the PDF download functionality. The /task-download/<task_id>/.../pdf endpoint verifies that the submitted file is a PDF using Pandora's content-based file-type detection, but previously ret…

    pandora-analysis pandora