Skip to content

Vendor

xemle vulnerabilities

3 published CVES affecting xemle, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
1
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of xemle alerts

Products

Latest xemle CVEs

Newest publication first

  1. CVE-2026-28679 HomeGallery: Path Traversal (Arbitrary File Read)

    Published
    HighCVSS 7.5 EPSS 0.50%

    Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. Prior to version 1.21.0, when a user requests a download, the application does not verify whether the requested file is located within the media source directory, which can result in s...

  2. CVE-2024-53276 GHSL-2024-092: Open CORS policy in home-gallery

    Published
    MediumCVSS 6.3 EPSS 0.56%

    Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, an open CORS policy in app.js may allow an attacker to view the images of home-gallery when it is using the default settings. The following express middleware al...

  3. CVE-2024-53275 GHSL-2024-091: DNS rebinding attack in home-gallery

    Published
    MediumCVSS 5.3 EPSS 0.28%

    Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, the default setup of home-gallery is vulnerable to DNS rebinding. Home-gallery is set up without TLS and user authentication by default, leaving it vulnerable to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.