Approved changes feed: RSS · Atom

cpe:2.3:a:jamovi:jamovi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJamovi (20a1d28d-6009-5e55-9d9a-1d981c8caad4)
ProductJamovi (f60fd126-4b52-5e1d-b235-05994590850e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/jamovi/jamovi purl2cpe 2026-06-01 10:17:16.963653

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28079 vulnerable 2026-06-08 05:31:22.904631 Details available
Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a payload. When opened by victim, the payload is triggered.
Published: 2021-04-26T11:24:28.000Z
Updated: 2024-08-03T21:33:17.319Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.