requarks
- Total products in the ecosystem
- 3
- Total vulnerabilities (90 days)
- 3
en
Verify to analyze this security profile
As of 09/19/2026, requarks recorded 3 security vulnerabilities in the last 90 days across 1 products, including 2 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Wiki.js had the most security vulnerabilities in the requarks ecosystem, with 3 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-92776Wiki.js through 2.5.314 Path Prefix Matching Authorization Bypass | Exploitation statusPublic exploit | FixYes | Affected productWiki.js | Published09/16/2026 | SeverityHigh |
CVE-2026-92775Wiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch | Exploitation statusPublic exploit | FixYes | Affected productWiki.js | Published09/16/2026 | SeverityHigh |
CVE-2026-92774Wiki.js through 2.5.314 Authorization Bypass via GraphQL Tag Omission | Exploitation statusPublic exploit | FixYes | Affected productWiki.js | Published09/16/2026 | SeverityMedium |
CVE-2026-44224Wiki.js: Privilege Escalation via Missing Group Validation in users.update | Exploitation statusPublic exploit | FixYes | Affected productwiki | Published05/12/2026 | SeverityHigh |
CVE-2025-56643 | Exploitation statusNot known exploited | FixNot confirmed | Affected productNot confirmed | Published11/18/2025 | SeverityCritical |
CVE-2024-45298Disabled user can bypass lockout by requesting password reset in wiki.js | Exploitation statusPublic exploit | FixNot confirmed | Affected productwiki | Published09/18/2024 | SeverityMedium |
CVE-2024-34710Wiki.js Stored XSS through Client Side Template Injection | Exploitation statusPublic exploit | FixYes | Affected productwiki | Published05/20/2024 | SeverityHigh |
CVE-2022-1681Authentication Bypass Using an Alternate Path or Channel in requarks/wiki | Exploitation statusNot confirmed | FixYes | Affected productrequarks/wiki | Published05/12/2022 | SeverityHigh |
CVE-2022-23654Improper write access check in Requarks/wiki | Exploitation statusNot known exploited | FixNot confirmed | Affected productwiki | Published02/22/2022 | SeverityHigh |
CVE-2021-25993Requarks wiki.js - Stored Cross-Site Scripting (XSS) in markdown editor | Exploitation statusPublic exploit | FixYes | Affected productwiki | Published12/29/2021 | SeverityMedium |
CVE-2021-43855Stored XSS via SVG in Requarks/wiki | Exploitation statusNot confirmed | FixNot confirmed | Affected productwiki | Published12/27/2021 | SeverityHigh |
CVE-2021-43856Stored XSS in non-image uploads in Requarks/wiki | Exploitation statusNot confirmed | FixNot confirmed | Affected productwiki | Published12/27/2021 | SeverityHigh |
CVE-2021-43842Stored XSS via SVG file upload in Wiki.js | Exploitation statusNot confirmed | FixNot confirmed | Affected productwiki | Published12/20/2021 | SeverityMedium |
CVE-2021-43800Asset directory traversal with some storage modules on Windows | Exploitation statusNot confirmed | FixNot confirmed | Affected productwiki | Published12/06/2021 | SeverityHigh |
CVE-2021-21383XSS in Wiki.js | Exploitation statusNot confirmed | FixNot confirmed | Affected productwiki | Published03/18/2021 | SeverityHigh |
CVE-2020-15274Stored XSS via search result in Wiki.js | Exploitation statusNot confirmed | FixNot confirmed | Affected productWiki.js | Published10/26/2020 | SeverityMedium |
CVE-2020-15236Directory Traversal in Wiki.js | Exploitation statusNot confirmed | FixNot confirmed | Affected productwiki | Published10/05/2020 | SeverityHigh |
CVE-2020-4052Stored XSS through template injection in Wiki.js | Exploitation statusNot confirmed | FixYes | Affected productWiki.js | Published06/16/2020 | SeverityMedium |
CVE-2020-11051XSS in Wiki.js | Exploitation statusNot confirmed | FixYes | Affected productWiki.js | Published05/05/2020 | SeverityMedium |