Description
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kong | Insomnia | ≤ 11.0.2 | — |
Advisories 1
- WID-SEC-2025-0994 Kong Insomnia: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · May 12, 2025