Known Vulnerabilities for Expression Web by Microsoft
Listed below are 8 of the newest known vulnerabilities associated with "Expression Web" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61453 json | Grav v2.0.0 contains a cross-site scripting vulnerability (fixed in 2.0.1). The XSS blueprint validator (Security::detectXss(... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-59509 json | An unauthenticated improper input validation vulnerability in the POST /fetch_cve_data endpoint in cve-search. A remote attac... | Not Provided | 2026-07-05 | 2026-07-06 |
| CVE-2026-59259 json | n8n before versions 1.123.61, 2.27.4, and 2.28.1 contains a permission bypass vulnerability in external secrets handling caus... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-59257 json | n8n before 1.123.61, 2.x before 2.27.4, and 2.28.x before 2.28.1 contains a SQL injection vulnerability in the legacy MySQL v... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-59209 json | n8n is an open source workflow automation platform. Prior to 1.123.61, 2.27.4, and, 2.28.1, an authenticated member with use-... | Not Provided | 2026-07-09 | 2026-07-09 |
| CVE-2026-58578 json | LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service (ReDoS) vulnerability that allows au... | Not Provided | 2026-07-02 | 2026-07-14 |
| CVE-2026-57437 json | Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::XPathConte... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-56240 json | Capgo before 12.128.12 contains a billing authorization bypass vulnerability in the plan_valid calculation that allows organi... | Not Provided | 2026-07-11 | 2026-07-13 |
| CVE-2026-55773 json | CedarJava is an open source Java implementation of the Cedar policy language, used for fine-grained authorization decisions. ... | Not Provided | 2026-07-13 | 2026-07-15 |
| CVE-2026-55574 json | vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, the structured_outputs... | Not Provided | 2026-07-06 | 2026-07-06 |