Logseq - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2026-06-09.

Products

• Logseq - 4 CVEs

Newest CVEs of Logseq

• CVE-2026-9279 - CVSS 8.7 (high), 2026-06-09: Logseq exposes an IPC handler that allows the renderer process to execute shell commands. While an allowlist restricts the command name (e.g. `git`, `pandoc`,…
• CVE-2026-47901 - CVSS 4.6 (medium), 2026-06-09: Logseq is vulnerable to a sandbox escape flaw where plugins running in sandboxed iframes can inject arbitrary HTML attributes, such as event handlers, into…
• CVE-2026-47900 - CVSS 4.6 (medium), 2026-06-09: Logseq is vulnerable to a stored cross-site scripting (XSS). A malicious plugin can include a JavaScript payload in the "name" field of its "package.json"…
• CVE-2026-47899 - CVSS 8.7 (high), 2026-06-09: The Electron preload script in Logseq exposes an API method that allows the renderer process to invoke IPC handlers without proper path validation. An…