Security Research

This repository contains CVE reports and Proof-of-Concepts for security vulnerabilities.

Published CVEs

• CVE-2025-55944: XSS via crafted SVG uploads (Slink 1.4.9 – 1.6.3)
• CVE-2026-26993: XSS in Raw File Preview (Flare <1.7.0)
• CVE-2026-27198: Improper Privilege Management in User creation (Formwork 2.0.0 - 2.3.3)

---