What’s Vulnerable › Products

allure-framework allure2 vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your allure-framework allure2 version is affected

Latest allure-framework allure2 vulnerabilities

• CVE-2026-55847 — Allure: Stored XSS via unescaped ANSI helper in Allure report status message/trace rendering (CVSS 6.1)
• CVE-2026-55846 — Allure: Path Traversal in Allure Report HTTP Server Allows Arbitrary File Read (CVSS 6.2)
• CVE-2025-52888 — Allure 2's xunit-xml-plugin Vulnerable to Improper XXE Restriction (CVSS 7.5)