spiderfoot vulnerabilities

CVEs whose affected-version data names the spiderfoot package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-75626Critical· 9.3PoC

1mo ago

SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata

SpiderFoot fails to HTML-escape correlation titles built from external scan data sources including server banners and metadata. Attackers can inject malicious HTML elements with event handlers into correlation results that execute script…

▾ Abyssalsmicallef · spiderfootEPSS 0.47%via NVD