dbarzin vulnerabilities

Products

• mercator 1

Latest dbarzin CVEs

Newest publication first

1. CVE-2026-27639 Mercator vulnerable to stored XSS via unescaped Blade directives in display templates

   Published 2026-02-25

   High·CVSS 8.5 EPSS 0.33%

   Mercator is an open source web application designed to enable mapping of information systems. A stored Cross-Site Scripting (XSS) vulnerability exists in Mercator prior to version 2026.02.22 due to the use of unescaped Blade directives ({!! !!}) in display templates. An authentic...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.