What’s Vulnerable › Products

code16 sharp vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your code16 sharp version is affected

Latest code16 sharp vulnerabilities

• CVE-2026-61825 — code16/sharp has a stored XSS via data-html-content Sanitizer Bypass (CVSS 8.7)
• CVE-2026-61823 — code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute (CVSS 7.3)
• CVE-2026-53634 — Sharp: Missing Authorization Check in Quick Creation Command Endpoints (CVSS 4.3)
• CVE-2026-44692 — Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint (CVSS 7.7)
• CVE-2026-33687 — Sharp has Unrestricted File Upload via Client-Controlled Validation Rules (CVSS 8.8)
• CVE-2026-33686 — Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtil (CVSS 8.8)
• CVE-2025-62798 — Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax (CVSS 5.4)