Threat database

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	1.2	EPSS 0.2%	CVE-2026-33284globaleaks-whistleblowing-software · Improper Input Validation Low1.2EPSS 0.2%2026-03-27CVE Database V5CVE-2026-33284 GlobaLeaks is free and open-source whistleblowing software. Prior to version 5.0.89, the /api/support endpoint of GlobaLeaks performs minimal validation on user-submitted support requests. As a result, arbitrary URLs can be included in support emails sent to administrators. Version 5.0.89 patches the issue. EPSS 0.2%Vulnerability globaleaks #cwe-20	CVE Database V5	2026-03-27

Page 1 of 1