References https://security.snyk.io/package/npm/vvvebjs https://app.opencve.io/cve/?product=vvvebjs&vendor=vvveb https://cve.scap.org.cn/vulnerability/VHN-341422 https://cve.imfht.com/poc_detail/575ef3e31187ea1a13e2797c57ee560b92499f73 https://www.sentinelone.com/vulnerability-database/cve-2026-5615/ https://github.com/givanz/VvvebJs/issues/342 https://github.com/advisories/GHSA-pc95-3wgm-x28p https://github.com/givanz/Vvveb/issues/289 https://app.opencve.io/cve/?page=2&product=vvveb&vendor=vvveb https://www.nsfocus.net/vulndb/95236
Related VulnerabilitiesPoCCVE-2026-5615: VvvebJs <= 2.0.5 - Cross-Site ScriptingPoCCVE-2024-29272: VvvebJs < 1.7.5 - Arbitrary File UploadVvvebJs save.php 存在任意文件上传漏洞(CVE-2024-29272)VvvebJs /save.php 文件上传漏洞(CVE-2024-29272)