EUVD-2026-18566

Shynet before 0.14.0 allows Host header injection in the password reset flow...

EUVD-2026-18568

Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,...

CVE-2026-35508

CVE-2026-35508 affects Shynet prior to version 0.14.0. The vulnerability is an XSS in the urldisplay and iconify template filters, caused by improper handling in the template rendering paths. The CVSS3.1 vector (AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) yields a base score of 5.4 (Medium) with network...

CVE-2026-35507

Shynet before 0.14.0 allows Host header injection in the password reset flow...