JA
Product
jan
by janhq · last CVE Jul 24, 2026
2
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add jan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-36857
7.5
2%
Jun 4
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface
Affected: 0.4.12
CVE-2026-66005
6.3
0%
Jul 24
Jan Local API Server CORS Origin Reflection via 0.0.0.0 Binding
Affected: through 0.8.4
Showing 2