Skip to content
OpenAdvisories

Vendor

perspective-dev

5 known vulnerabilities.

perspective-dev at a glance

Last 12 months
5
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 5 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202650
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

perspective 5
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.5
    CVE-2026-67200

    Perspective 5.0.0 Path Traversal via cwd_static_file_handler

    Perspective 5.0.0 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files from the server filesystem by including literal ../ segments in HTTP request URL paths. Attackers can bypass the insufficient query-…

    perspective-dev perspective
  • Medium 6.5
    CVE-2026-67199

    Perspective 5.0.0 DoS via Loop Expression Evaluation

    Perspective 5.0.0 contains a denial of service vulnerability that allows remote attackers to block the server event loop indefinitely by submitting a crafted expression containing unbounded for or while loop constructs in a TableMakeViewReq message. Attackers…

    perspective-dev perspective
  • High 7.5
    CVE-2026-67198

    Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher

    Perspective 5.0.0 contains a denial-of-service vulnerability in the VirtualServer protocol dispatcher that allows unauthenticated remote attackers to crash the server process by sending malformed or incomplete protobuf messages. Attackers can send well-formed…

    perspective-dev perspective
  • Medium 5.4
    CVE-2026-67196

    Perspective 5.0.0 XSS via Debug Plugin innerHTML Interpolation

    Perspective 5.0.0 contains a cross-site scripting vulnerability in the built-in Debug plugin that allows attackers to inject arbitrary HTML and JavaScript by writing table cell values containing unescaped HTML markup, which are interpolated directly into inne…

    perspective-dev perspective
  • High 8.8
    CVE-2026-67195

    Perspective 5.0.0 RCE via eval() Expression Injection

    Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied inp…

    perspective-dev perspective