logseq

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. logseq Local HTTP API server.cljs validate-auth-token missing authenticationCVE-2026-124573Logseq · CVSS 7.3 · 0.4% likely

   CWE-306

2. Shell command injection in LogseqCVE-2026-9279logseq · CVSS 8.7 · 0.3% likely

   CWE-78

3. Iframe escape by plugins in LogseqCVE-2026-47901logseq · CVSS 4.6 · 0.1% likely

   CWE-79

4. Stored XSS via Unsanitized Plugin Metadata in LogseqCVE-2026-47900logseq · CVSS 4.6 · 0.1% likely

   CWE-79

5. Arbitrary File Read, Write, Rename, and Delete in LogseqCVE-2026-47899logseq · CVSS 8.7 · 0.1% likely

   CWE-749

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.