sidekiq-cron CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM sidekiq-cron CVE published 2026-05-07

CVE-2025-67202

Sidekiq-cron through 2.3.1 is vulnerable to cross-site scripting (XSS) via a crafted URL rendered from cron.erb. The CVE record was published on 2026-05-07T15:16:04.947Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. Defenders should assess exposure and prioritize verification and potential updates to mitigate the risk of XSS attacks. The vulnerability has a CVSS score [truncated]