CVE-2026-27627

creationtimestamp| type| source ---|---|--- 2026-02-25 04:18:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnt7hc2ky2t 2026-02-25 05:30:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfnxa5vvd42n 2026-03-01 03:40:09+00:00| seen|...

CVE-2026-27627

Karakeep is a elf-hostable bookmark-everything app. In version 0.30.0, when the Reddit metascraper plugin returns readableContentHtml, the HTML parsing subprocess uses it directly without running it through DOMPurify. Every other content source in the crawler goes through Readability + DOMPurify,...