Algernon Project Algernon — known CVE vulnerabilities

Every CVE whose affected-product data names Algernon Project Algernon, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2025-65754 — CVSS 6.1 (medium): Cross Site Scripting vulnerability in Algernon v1.17.4 allows attackers to execute arbitrary code via injecting a crafted payload into a…
• CVE-2023-26131 — CVSS 5.4 (medium): All versions of the package github.com/xyproto/algernon/engine; all versions of the package github.com/xyproto/algernon/themes are…