Skip to content
OpenAdvisories

Vendor

voxel51

2 known vulnerabilities.

Products

fiftyone 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-80426

    FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description

    FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage an…

    voxel51 fiftyone