Owasp Faction — known CVE vulnerabilities

Every CVE whose affected-product data names Owasp Faction, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2025-66022 — CVSS 9.6 (critical): FACTION is a PenTesting Report Generation and Collaboration Framework. Prior to version 1.7.1, an extension execution path in Faction’s…