Open Source MediaWiki CommonsMetadata Extension <1.45

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical0high0medium0low

updated 2026-10-28

vulnerabilities (12)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-103446US	—	0.33% (26th)	Exploit	no fix	2026-09-30	—
CVE-2026-103437US	—	0.31% (24th)	Exploit	no fix	2026-09-30	—
CVE-2026-103445US	—	0.30% (23rd)	Exploit	no fix	2026-09-30	—
CVE-2026-103441US	—	0.28% (21st)	Exploit	no fix	2026-09-30	—
CVE-2026-103442US	—	0.28% (20th)	Exploit	no fix	2026-09-30	—
CVE-2026-103440US	—	0.27% (19th)	Exploit	no fix	2026-09-30	—
CVE-2026-103444US	—	0.34% (27th)	—	no fix	2026-09-30	—
CVE-2026-103585US	—	0.30% (23rd)	—	no fix	2026-09-30	—
CVE-2026-103584US	—	0.29% (21st)	—	no fix	2026-09-30	—
CVE-2026-103443US	—	0.20% (10th)	—	no fix	2026-09-30	—
CVE-2026-103439US	—	0.11% (1st)	—	no fix	2026-09-30	—
CVE-2026-103438US	—	0.11% (1st)	—	no fix	2026-09-30	—

The flaw types (CWEs) most of these CVEs share.

CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)8 CVEs
CWE-15External Control of System or Configuration Setting1 CVEs
CWE-202Exposure of Sensitive Information Through Data Queries1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.