What’s Vulnerable › Products

refly-ai refly vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your refly-ai refly version is affected

Latest refly-ai refly vulnerabilities

• CVE-2026-101052 — refly-ai refly JWT Token app.config.ts hard-coded credentials (CVSS 7.3)
• CVE-2026-91199 — Refly through 1.1.0 Server-Side Request Forgery via scrape endpoint (CVSS 5.0)