GHSA-crvm-xjhm-9h29
NoneCVSS
—
EPSS
—
Published
Nov 4, 2025
CISA due date
—
The record
OctoPrint vulnerable to XSS in Action Commands Notification and Prompt
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | octoprint | 0 | 1.11.4 |
Related vulnerabilities
- CVE-2025-64187 OctoPrint is vulnerable to XSS through Action Command Notifications and Prompts Same vulnerability
- CVE-2026-23892 OctoPrint provides a web interface for controlling consumer 3D printers. Also affects octoprint
- GHSA-xg4x-w2j3-57h6 OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication Also affects octoprint
- CVE-2025-58180 OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload Also affects octoprint
- CVE-2026-96379 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96382 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96368 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79
- CVE-2026-96361 Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting")… CWE-79