What’s Vulnerable › Products

jleehr canto-saas-api vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your jleehr canto-saas-api version is affected

Latest jleehr canto-saas-api vulnerabilities

• CVE-2026-55375 — canto-saas-api: OAuth credentials exposed in URL query string and exception messages (CVSS 5.3)
• CVE-2026-55374 — canto-saas-api: Authenticated API requests can be redirected via unencoded path variables (CVSS 4.8)