Skip to content
OpenAdvisories

Product · treeverse

lakeFS-enterprise

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-48026

    lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML

    lakeFS is an open-source tool that transforms object storage into a Git-like repositories. Prior to version 1.81.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from repository objects without sanitizing…

    treeverse lakeFS lakeFS-enterprise