Filtered by vendor Pantsel
                         Subscriptions
                    
                    
                
                        Filtered by product Konga
                         Subscriptions
                    
                    
                
                    Total
                    2 CVE
                
            | CVE | Vendors | Products | Updated | CVSS v3.1 | 
|---|---|---|---|---|
| CVE-2024-34243 | 1 Pantsel | 1 Konga | 2025-06-13 | 5.4 Medium | 
| Konga v0.14.9 is vulnerable to Cross Site Scripting (XSS) via the username parameter. | ||||
| CVE-2023-39846 | 1 Pantsel | 1 Konga | 2024-11-21 | 9.8 Critical | 
| An issue in Konga v0.14.9 allows attackers to bypass authentication via a crafted JWT token. | ||||
                            
                                
                                
                                    Page 1 of 1.