Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

pivotick — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in pivotick, with AI-generated Chinese analysis, references, and POCs.

Vendor: pivotick

CVE ID Title CVSS Severity Published
CVE-2026-67174 DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick CWE-79 9.2 Critical 2026-07-28
CVE-2026-67173 Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests CWE-918 5.1 Medium 2026-07-28
CVE-2026-66922 Pivotick Prototype-Key Collision in Tree Layout and Cycle Detection Allows Graph Manipulation and Denial of Service CWE-1321 5.1 Medium 2026-07-28
CVE-2026-66921 Pivotick - Stored DOM-Based Cross-Site Scripting via Unescaped Markdown Node References CWE-79 6.3 Medium 2026-07-28
CVE-2026-66920 Pivotick - Stack Exhaustion Denial of Service via Deep or Cyclic Graph Data CWE-674 8.2 High 2026-07-28
CVE-2026-66919 Stored DOM-Based Cross-Site Scripting in Node Modal Headers CWE-79 6.9 Medium 2026-07-28
CVE-2026-66918 DOM-Based Cross-Site Scripting via Unsanitized SVG Node Icons CWE-79 8.2 High 2026-07-28
CVE-2026-66825 Cross-Site Scripting via Unsafe URL Schemes in Pivotick Property Links CWE-79 6.9 Medium 2026-07-27

All 8 known CVE vulnerabilities affecting pivotick with full Chinese analysis, references, and POCs where available.