PatchTheCVEcveclient vulnerabilities and fixes
Recent CVEs affecting cveclient, with upgrade or downgrade steps. 2 tracked.
cveclient has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-04-02. Highest priority: CVE-2026-35467 (score 35/100).
- CVE-2026-35467 HIGH 7.5 UPGRADE The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or o
- CVE-2026-35466 MEDIUM 6.1 UPGRADE XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts in
FAQ
How do I fix cveclient vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cveclient being exploited right now?
None of the tracked cveclient CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cveclient CVE should I patch first?
CVE-2026-35467 currently ranks highest (35/100): The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or o.