dymo_id vulnerabilities
CVEs whose affected-version data names the dymo_id package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-102262High· 7.3Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory
Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file'…
▾ TwilightNewell Brands · DYMO IDvia NVD
CVE-2026-101893Medium· 4.4Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing
Newell Brands DYMO ID 1.5.1.71 parses job files using XmlDocument.Load() without disabling DTD processing. The PC Job Files view automatically parses every recognized job file extension on folder browse. A crafted file on any browsed net…
▾ SunlitNewell Brands · DYMO IDvia NVD