Browse all 6 CVE security advisories affecting typemill. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-53468 | Typemill has Stored HTML Attribute Injection in Metadata Fields — typemill CWE-79 | 4.6 | Medium | 2026-08-21 |
| CVE-2026-71518 | Typemill < 2.26.0 Authorization Bypass via Media File Download Route — typemill CWE-863 | 7.5 | High | 2026-08-17 |
| CVE-2026-44401 | Typemill CMS 2.x Persistent XSS via Markdown javascript URI — Typemill CWE-79 | 4.8 | Medium | 2026-08-10 |
| CVE-2026-71213 | typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brute-Force — typemill CWE-307 | 9.1 | Critical | 2026-08-05 |
| CVE-2026-49133 | Typemill < 2.24.0 Path Traversal via ControllerApiImage::getPagemedia() — typemill CWE-22 | 6.5 | Medium | 2026-06-17 |
| CVE-2026-24127 | Typemill has Reflected XSS via login error view template — typemill CWE-79 | 5.4 | Medium | 2026-01-23 |
This page lists every published CVE security advisory associated with typemill. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.