Skip to content
OpenAdvisories
Critical · 9.4 CVE-2025-65095 EUVD-2025-198237

Lookyloo is vulnerable due to improper user input sanitization

Published Nov 19, 2025 · Updated Nov 20, 2025 · Assigned by GitHub_M

Description

Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call each other. Prior to version 1.35.1, there is potential cross-site scripting on index and tree page. This issue has been patched in version 1.35.1.

Affected products

VendorProductAffectedFixed
Lookyloo lookyloo < 1.35.1 —

References