JetEngine vulnerabilities
CVEs whose affected-version data names the JetEngine package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-97265Medium· 6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock. Jetimpex Inc. JetEngine allows Stored XSS. This issue affects JetEngine: from n/a through 3.8.15.3.
▾ SunlitCrocoblock. Jetimpex Inc. · JetEngineEPSS 0.13%via NVD
CVE-2026-97237High· 7.1Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
▾ TwilightCrocoblock. Jetimpex Inc. · JetEngineEPSS 0.18%via NVD
CVE-2026-97238Medium· 5.5Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
Subscriber Cross Site Scripting (XSS) in JetEngine <= 3.8.14.3 versions.
▾ SunlitCrocoblock. Jetimpex Inc. · JetEngineEPSS 0.16%via NVD