jhuckaby has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.9 (high), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.9
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
jhuckaby vulnerabilities
CVEs affecting jhuckaby, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-58255High· 8.8Cronicle: Non-admin uid/gid injection in create_event/update_event → run-as-arbitrary-user (incl. root) — sibling of CVE-2026-39401
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.121, a non-administrator user or scoped API key with `create_events` and `run_events` privileges can inject top-level `uid` and `gid` field…
▾ Twilightjhuckaby · CronicleEPSS 0.41%via CVEORG
CVE-2026-55562Critical· 9.0PoCCronicle is a multi-server task scheduler and runner, with a web based front-end UI
Cronicle is a multi-server task scheduler and runner, with a web based front-end UI. Prior to 0.9.119, the administrator Activity Log in htdocs/js/pages/admin/Activity.js concatenates the attacker-controlled item.user.full_name value int…
▾ Abyssaljhuckaby · CronicleEPSS 0.46%via NVD