P
Üretici güvenlik profili
Penpot
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE16
Kritik1
CISA KEV0
Public exploit11
Yama oranı%6
Ort. CVSS6.3
12 aylık açık hızı
0
0
0
0
0
0
0
0
0
3
1
12
CVE KEV
CVE önem dağılımı
16toplam CVE
Kritik1 (6%)
Yüksek3 (19%)
Orta12 (75%)
Yama ve sömürü görünümü
%6
Doğrulanmış yama
%0
CISA KEV
%69
Public exploit
1Yama var
0Kısmi
0Geçici çözüm
0Üretici: yama yok
15Bilinmiyor
Son güvenlik açıkları
6.5
CVE-2026-105696
Penpot: Share-link page-scope escalation: a share-link holder reads pages outside the link's authorized scope via the get-page RPC command
P
Yama durumu bilinmiyorEPSS %0
5.9
CVE-2026-105695
Penpot: Missing authorization in chunked-upload assembly lets another authenticated user consume a victim's upload session
P
Yama durumu bilinmiyorEPSS %0
5.4
CVE-2026-105694
Penpot: Stored XSS via Unsanitised SVG Uploads
P
Yama durumu bilinmiyorEPSS %0
5.3
CVE-2026-105693
Penpot: Anonymous share-link token disclosure & page-scope bypass via get-view-only-bundle
P
Yama durumu bilinmiyorEPSS %0
5.4
CVE-2026-105692
Penpot: IDOR in Share-Link Deletion Allows Any File Editor to Delete Share-Links They Did Not Create
P
Yama durumu bilinmiyorEPSS %0
9.9
CVE-2026-105691
Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color
P
Yama durumu bilinmiyorEPSS %0
5.9
CVE-2026-105690
Penpot: Server-side session not invalidated on logout; stale auth-token cookie remains valid for full profile access
P
Yama durumu bilinmiyorEPSS %0
6.0
CVE-2026-105689
Penpot: SSRF guard bypass via IPv6 transition addresses (NAT64/6to4/Teredo) in webhook delivery and media download
P
Yama durumu bilinmiyorEPSS %0
6.7
CVE-2026-105688
Penpot: Team admin can escalate to owner via team invitation (missing owner-role guard on the invitation path)
P
Yama durumu bilinmiyorEPSS %0
4.9
CVE-2026-105687
Penpot: A team admin (non-owner) can remove the team owner via ::delete-team-member — missing owner-protection
P
Yama durumu bilinmiyorEPSS %0