critical9.3
CVE-2025-1087
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code.
Impact
Kong Insomnia Desktop Application before 11.0.2 contains a template injection vulnerability that allows attackers to execute arbitrary code. The vulnerability exists due to insufficient validation of user-supplied input when processing template strings, which can lead to arbitrary JavaScript execution in the context of the application.
Affected products
| Product | Affected versions |
|---|---|
| Kong Insomnia Desktop Application | before 11.0.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.