Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-65368
6.1
MEDIUMCVSS v3
Published
January 15, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output.
CodeWithCJ/SparkyFitness
GitHubSparkyFitness: Built for Families. Powered by AI. Track food, fitness, water, and health — together.
GitHubSparkyFitness: Built for Families. Powered by AI. Track food, fitness, water, and health — together.<= 0.15.8.2NVD