Known vulnerabilities in Loofah

Software: Loofah
Software CPE: cpe:2.3:a:mike_dalessio:loofah:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Loofah Loofah is affected by 7 known vulnerabilities: 3 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128121 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
2.25.1 27.04.2026 SB2026042794
#VU70330 - Uncontrolled Recursion
CVE-2022-23516
CWE-674 Medium
No
No
2.19.1 14.12.2022 SB2022121431
SB2023032922
SB2023050806
and 1 more
#VU70329 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23515
CWE-79 Low
No
No
2.19.1 14.12.2022 SB2022121431
SB2023032922
SB2023050806
and 1 more
#VU70328 - Resource exhaustion
CVE-2022-23514
CWE-400 Medium
No
No
2.19.1 14.12.2022 SB2022121431
SB2023032922
SB2023050806
#VU22927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-15587
CWE-79 Low
No
No
2.3.1 22.11.2019 SB2019102229
SB2022110425
SB2022111834
and 3 more
#VU15710 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-16468
CWE-79 Low
No
No
2.2.3 02.11.2018 SB2018110502
SB2018113001
SB2019010906
and 4 more
#VU11251 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-8048
CWE-79 Low
No
No
- 22.03.2018 SB2018032305
SB2018041401
SB2022111834