Approved changes feed: RSS · Atom

cpe:2.3:a:serenity:serenity:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSerenity (afae7083-780a-54ae-b0a3-e9adc9c43707)
ProductSerenity (04d99923-12b4-542c-b2c2-83332e8ea307)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/serenity-is/serenity purl2cpe 2026-06-01 10:18:20.812299

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-26318 vulnerable 2026-06-08 06:31:26.367106 Details available
Serenity before 6.8.0 allows XSS via an email link because LoginPage.tsx permits return URLs that do not begin with a / character.
Published: 2024-02-19T00:00:00.000Z
Updated: 2025-03-25T18:43:15.151Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.