Skip to content

Vendor

badlogic vulnerabilities

3 published CVES affecting badlogic, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0
Atom feed of badlogic alerts

Products

Latest badlogic CVEs

Newest publication first

  1. CVE-2026-5557 badlogic pi-mono pi-mom Slack Bot slack.ts authentication bypass

    Published
    MediumCVSS 5.3 EPSS 0.37%

    A vulnerability was detected in badlogic pi-mono up to 0.58.4. This issue affects some unknown processing of the file packages/mom/src/slack.ts of the component pi-mom Slack Bot. The manipulation results in authentication bypass using alternate channel. The attack can be executed...

  2. CVE-2026-5556 badlogic pi-mono loader.ts discoverAndLoadExtensions code injection

    Published
    MediumCVSS 5.3 EPSS 0.30%

    A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/coding-agent/src/core/extensions/loader.ts. The manipulation leads to code injection. Remote exploitation of the att...

  3. CVE-2026-5533 badlogic pi-mono SVG Artifact SvgArtifact.ts cross site scripting

    Published
    MediumCVSS 5.3 EPSS 0.27%

    A vulnerability was determined in badlogic pi-mono 0.58.4. The impacted element is an unknown function of the file packages/web-ui/src/tools/artifacts/SvgArtifact.ts of the component SVG Artifact Handler. This manipulation causes cross site scripting. Remote exploitation of the a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.