📦 Aliasvault

A stored cross-site scripting (XSS) vulnerability in AliasVault Web Client allows attackers to inject malicious JavaScript into emails sent to any AliasVault email alias. When victims view these email...

This vulnerability in AliasVault Android app allows a malicious local app to potentially obtain passkey responses for websites it shouldn't have access to. The issue stems from incomplete validation o...