[ Vendor · 1 CVEs ]
headroomlabs-ai
CVEs affecting headroomlabs-ai published in the last 30 days, plus any headroomlabs-ai CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-71416 | 11 Sep 2026 | CVSS 8.8 | Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)Headroom compresses data before the data reaches a large language model. Prior to version 0.35.0, the Headroom WebSocket server does not validate the… | Fix |