blossom-editor has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 5.4 (medium).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.4
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Weakness classes
Products
- Blossom 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
blossom-editor vulnerabilities
CVEs affecting blossom-editor, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-119659Medium· 5.4Blossom through 1.17.1 Authorization Bypass via Folder Endpoints
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated users to access other users' folders because FolderService queries filter only on folder id. Attackers can supply another user's folder id to…
▾ Sunlitblossom-editor · BlossomEPSS 0.26%via CVEORG
CVE-2026-119644Medium· 5.4PoCBlossom through 1.17.1 Authorization Bypass via Picture Delete and Star Endpoints
Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/ba…
▾ Twilightblossom-editor · BlossomEPSS 0.33%via CVEORG