allure-framework/allure2 Security Advisories | GitStock

medium2026-06-19

Allure Report: Stored XSS via unescaped ANSI helper in status message/trace rendering

GHSA-gx93-m64w-5m6h · CVE-2026-55847

medium2026-06-19

Allure Report: Path Traversal in HTTP Server Allows Arbitrary File Read

GHSA-82cg-3hv7-74gc · CVE-2026-55846

high2026-03-18

Allure Report has an Arbitrary File Read via Path Traversal in Attachment Processing (Allure 1, Allure 2, and XCTest Readers)

GHSA-64hm-gfwq-jppw · CVE-2026-33166

high2025-06-25

Allure Report allows Improper XXE Restriction via DocumentBuilderFactory

GHSA-h7qf-qmf3-85qg · CVE-2025-52888