{"items":[{"id":"CVE-2026-93421","published":"2026-09-23T18:59:52.637Z","updated":"2026-09-23T19:41:34.966Z","title":"Mesop: Unauthenticated ANSI Escape Sequence Injection in CSP Reporting Endpoint","severity":"MEDIUM","score":5.3,"vendor":"mesop-dev","product":"mesop","kev":false,"epss":0.00528,"kevAdded":null,"exploit":false},{"id":"CVE-2026-77357","published":"2026-08-25T20:40:39.711Z","updated":"2026-08-26T12:54:53.760Z","title":"Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server","severity":"HIGH","score":8.7,"vendor":"mesop-dev","product":"mesop","kev":false,"epss":0.00529,"kevAdded":null,"exploit":true},{"id":"CVE-2026-34824","published":"2026-04-03T22:41:34.828Z","updated":"2026-04-06T15:42:06.793Z","title":"Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service","severity":"HIGH","score":7.5,"vendor":"mesop-dev","product":"mesop","kev":false,"epss":0.0075,"kevAdded":null,"exploit":true},{"id":"CVE-2026-33057","published":"2026-03-20T07:16:59.603Z","updated":"2026-03-25T13:52:27.880Z","title":"Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py","severity":"CRITICAL","score":9.8,"vendor":"mesop-dev","product":"mesop","kev":false,"epss":0.05411,"kevAdded":null,"exploit":true},{"id":"CVE-2026-33054","published":"2026-03-20T06:57:35.948Z","updated":"2026-03-20T13:50:27.328Z","title":"Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion","severity":"CRITICAL","score":10,"vendor":"mesop-dev","product":"mesop","kev":false,"epss":0.00741,"kevAdded":null,"exploit":true},{"id":"CVE-2025-30358","published":"2025-03-27T14:49:11.592Z","updated":"2025-03-27T15:04:59.072Z","title":"Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks","severity":"HIGH","score":8.1,"vendor":"mesop-dev","product":"mesop","kev":false,"epss":0.0071,"kevAdded":null,"exploit":false}]}