VulnSea

shlinkio has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.6 (medium).

CVEs per month

Last 12 months, by publish date

101112010203040506070809
Exploited share
0% vs 1% corpus
Median CVSS
5.6
Publish → KEV
—
Last 90 days
2 prev 0

Weakness classes

Products

  • shlink 2
Follow shlinkio:RSS feedSave a search →Embed badge ↗
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

shlinkio vulnerabilities

CVEs affecting shlinkio, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-92760Medium· 6.5PoC
1w ago

Shlink through 5.1.6 fails to enforce API key role restrictions when issuing Mercure subscription tokens, allowing restricted keys to subscribe to all topics

Shlink through 5.1.6 fails to enforce API key role restrictions when issuing Mercure subscription tokens, allowing restricted keys to subscribe to all topics. Attackers with author-only or domain-only keys can access the mercure-info end…

▾ Twilightshlinkio · shlinkEPSS 0.40%via NVD
CVE-2026-18738Medium· 4.7
1mo ago

Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, o…

Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas into exported visit data by supplying malicious values in User-Agent, Referer, o…

▾ Sunlitshlinkio · ShlinkEPSS 0.38%via NVD
shlinkio vulnerabilities (CVEs) · VulnSea