nukeviet/nukeviet vulnerabilities
CVEs whose affected-version data names the nukeviet/nukeviet package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-54064High· 8.7NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module
NukeViet: Multiple Anti-XSS Filter Bypasses Leading to Stored XSS in News Module
▾ Twilightnukeviet · nukeviet/nukevietvia GHSA
CVE-2026-54065High· 8.7NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function
NukeViet: Path Traversal to Arbitrary File Deletion in Edit Comment Function
▾ Twilightnukeviet · nukeviet/nukevietvia GHSA
CVE-2026-55372High· 7.2NukeViet: Pre-authentication SSRF via X-Forwarded-Host
NukeViet: Pre-authentication SSRF via X-Forwarded-Host
▾ Twilightnukeviet · nukeviet/nukevietvia GHSA
CVE-2026-48118High· 8.2NukeViet: Unauthenticated Reflected XSS in Comment Module
NukeViet: Unauthenticated Reflected XSS in Comment Module
▾ Twilightnukeviet · nukeviet/nukevietvia GHSA
CVE-2026-49259High· 8.7NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
NukeViet: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
▾ Twilightnukeviet · nukeviet/nukevietvia GHSA