alf.io

CVEs (5)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2026-41412	Alf.io alf.io	Med	0.32	4.9	0.00	Jun 2, 2026	alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, the alf.io extension sandbox injects a fully-functional HTTP client (`simpleHttpClient`) into every extension script's scope. The…
CVE-2023-2260	Alf Alf	Hig	0.00	8.8	0.01	Apr 24, 2023	Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVE-2023-2259	Alf Alf	Hig	0.00	7.2	0.01	Apr 24, 2023	Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVE-2023-2258	Alf Alf	Hig	0.00	8.8	0.01	Apr 24, 2023	Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVE-2023-0301	GitHub alf.io	Med	0.00	5.4	0.00	Jan 14, 2023	Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.

CVE-2026-41412MedJun 2, 2026
Alf.io
alf.io
risk 0.32cvss 4.9epss 0.00
alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5-2606, the alf.io extension sandbox injects a fully-functional HTTP client (`simpleHttpClient`) into every extension script's scope. The…
CVE-2023-2260HigApr 24, 2023
Alf
Alf
risk 0.00cvss 8.8epss 0.01
Authorization Bypass Through User-Controlled Key in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVE-2023-2259HigApr 24, 2023
Alf
Alf
risk 0.00cvss 7.2epss 0.01
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVE-2023-2258HigApr 24, 2023
Alf
Alf
risk 0.00cvss 8.8epss 0.01
Improper Neutralization of Formula Elements in a CSV File in GitHub repository alfio-event/alf.io prior to 2.0-M4-2304.
CVE-2023-0301MedJan 14, 2023
GitHub
alf.io
risk 0.00cvss 5.4epss 0.00
Cross-site Scripting (XSS) - Stored in GitHub repository alfio-event/alf.io prior to Alf.io 2.0-M4-2301.