sharp

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Sharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtilCVE-2026-33686code16 · CVSS 8.8 · 0.6% likely

   CWE-22

2. Sharp has Unrestricted File Upload via Client-Controlled Validation RulesCVE-2026-33687code16 · CVSS 8.8 · 0.5% likely

   CWE-434

3. Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpointCVE-2026-44692code16 · CVSS 7.7 · 0.3% likely

   CWE-639

4. code16/sharp has a stored XSS via data-html-content Sanitizer BypassCVE-2026-61825code16 · CVSS 8.7 · 0.2% likely

   CWE-79

5. Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntaxCVE-2025-62798code16 · CVSS 5.4 · 0.2% likely

   CWE-79

6. Sharp: Missing Authorization Check in Quick Creation Command EndpointsCVE-2026-53634code16 · CVSS 4.3 · 0.2% likely

   CWE-862

7. code16 Sharp vulnerable to stored XSS via iframe srcdoc AttributeCVE-2026-61823code16 · CVSS 7.3 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.