CVE-2024-23997: Lukasbach Yana

Critical severity, CVSS 9.6. EPSS: 0.7% chance of exploitation in the next 30 days.

Lukas Bach yana =<1.0.16 is vulnerable to Cross Site Scripting (XSS) via src/electron-main.ts.

Affected products

• Lukasbach Yana: up to and including 1.0.16

Published 2024-07-05. Last modified 2026-06-17.