PatchTheCVEnaver vulnerabilities
Recent CVEs affecting naver products. 3 tracked.
naver has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-01-28. Highest priority: CVE-2026-23768 (score 30/100).
- CVE-2026-23769 MEDIUM 6.1 UPGRADE lucy-xss-filter before commit e5826c0 allows an attacker to execute malicious JavaScript due to improper sanit
- CVE-2026-23768 MEDIUM 6.1 UPGRADE lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs
- CVE-2026-1513 MEDIUM 6.1 UPGRADE billboard.js before 3.18.0 allows an attacker to execute malicious JavaScript due to improper sanitization dur
FAQ
How do I fix naver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is naver being exploited right now?
None of the tracked naver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which naver CVE should I patch first?
CVE-2026-23768 currently ranks highest (30/100): lucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to arbitrary URLs.