What’s Vulnerable › Products

karakeep-app karakeep vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your karakeep-app karakeep version is affected

Latest karakeep-app karakeep vulnerabilities

• CVE-2026-75774 — karakeep-app karakeep OAuth Sign-In auth.ts improper authentication (CVSS 3.7)
• CVE-2026-75773 — karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication (CVSS 3.7)
• CVE-2026-45082 — Karakeep has a SSRF Protection Bypass via Redirect Handling (CVSS 7.6)
• CVE-2026-27627 — Karakeep's Reddit plugin content bypasses DOMPurify sanitization, enabling stored XSS (CVSS 6.1)