Skip to content

Vendor

jsbroks vulnerabilities

5 published CVES affecting jsbroks, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
5
Critical
0
High
0
Medium
5
Low
0
Unscored
0
CISA KEV
0
Atom feed of jsbroks alerts

Products

Latest jsbroks CVEs

Newest publication first

  1. CVE-2026-7681 jsbroks COCO Annotator Dataset API datasets.py authorization

    Published
    MediumCVSS 6.9 EPSS 0.46%

    A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1. Affected by this vulnerability is an unknown functionality of the file backend/webserver/api/datasets.py of the component Dataset API. The manipulation of the argument DatasetId leads to authorizat...

  2. CVE-2026-7680 jsbroks COCO Annotator Data Endpoint datasets.py path traversal

    Published
    MediumCVSS 5.3 EPSS 0.47%

    A weakness has been identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file backend/webserver/api/datasets.py of the component Data Endpoint. Executing a manipulation of the argument folder can lead to path traversal. The attack can be launc...

  3. CVE-2026-2109 jsbroks COCO Annotator Delete Category undo improper authorization

    Published
    MediumCVSS 5.3 EPSS 0.43%

    A vulnerability was identified in jsbroks COCO Annotator up to 0.11.1. Affected is an unknown function of the file /api/undo/ of the component Delete Category Handler. Such manipulation of the argument ID leads to improper authorization. The attack may be launched remotely. The e...

  4. CVE-2026-2108 jsbroks COCO Annotator Endpoint long_task denial of service

    Published
    MediumCVSS 6.9 EPSS 0.77%

    A vulnerability was determined in jsbroks COCO Annotator up to 0.11.1. This impacts an unknown function of the file /api/info/long_task of the component Endpoint. This manipulation causes denial of service. The attack may be initiated remotely. The exploit has been publicly discl...

  5. CVE-2024-10141 jsbroks COCO Annotator Session predictable state

    Published
    MediumCVSS 6.3 EPSS 0.81%

    A vulnerability, which was classified as problematic, was found in jsbroks COCO Annotator 0.11.1. This affects an unknown part of the component Session Handler. The manipulation of the argument SECRET_KEY leads to predictable from observable state. It is possible to initiate the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.