CVE-2025-49588

Linkwarden 2.10.2 is affected by a Local File Inclusion-style vulnerability where unvalidated file:/// links are passed to parsers/playwright, potentially leaking other users’ links and, in some cases, environment secrets. The issue is mitigated by upgrading to version 2.10.3, which has a fix tha...