VULNERABILITY INTELLIGENCE
CVE-2025-1087
EPSS probability1.13%
CISA KEVNot currently listed
Published2025-05-09
Last modified2026-06-17
Description
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.
Weakness classification
- 02762ae7-200e-4b20-9b2b-a77d5b8fc4cb: CWE-20