[ Vendor · 2 CVEs ]

giuspen

CVEs affecting giuspen published in the last 30 days, plus any giuspen CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-118692 28 Oct 2026 CVSS 7.0 giuspen cherrytreeCherryTree through 1.7.2 contains an OS command injection vulnerability in CtActions::link_clicked that allows attackers to execute commands by…
CVE-2026-118693 28 Oct 2026 CVSS 4.7 giuspen cherrytreeCherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trusts unvalidated embedded-file…