CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor archive
3 CVEs tagged to vendor lichess — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.
lichess.org is the forever free, adless and open source chess server. Any approved streamer can inject arbitrary HTML into /streamer and the homepage “Live streams” widget by plac…
Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery (SSRF) vulnerability in the game export API. The players pa…
powertip.ts in Lila (for Lichess) before ab0beaf allows XSS in some applications because of an innerHTML usage pattern in which text is extracted from a DOM node and interpreted a…