loopx vulnerabilities

CVEs whose affected-version data names the loopx package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-108372High· 7.1

yesterday

LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files

Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` …

▾ Twilighthuangruiteng · loopxvia CVEORG