humansignal Label Studio Vulnerabilities

Humansignal Label-studio vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

12 January 2026

Stored XSS Vulnerability in Label Studio by HumanSignal
CVE-2026-22033
HumansignalLabel-studio8.6HIGH

14 May 2025

Cross-Site Scripting Vulnerability in Label Studio by HumanSignal
CVE-2025-47783
HumansignalLabel-studio7.6HIGH

14 February 2025

Server-Side Request Forgery in Label Studio's S3 Storage Integration
CVE-2025-25297
HumansignalLabel-studio8.6HIGH
Cross-Site Scripting Vulnerability in Label Studio by HumanSignal
CVE-2025-25296
HumansignalLabel-studio👾🟡6.1MEDIUM
Path Traversal Vulnerability in Label Studio SDK by HumanSignal
CVE-2025-25295
HumansignalLabel-studio8.7HIGH

22 February 2024

Label Studio vulnerable to Cross-site Scripting if `<Choices>` or `<Labels>` are used in labeling config
CVE-2024-26152
HumansignalLabel-studio6.1MEDIUM

31 January 2024

Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections
CVE-2023-47116
HumansignalLabel-studio5.3MEDIUM

24 January 2024

Label Studio XSS Vulnerability on Data Import
CVE-2024-23633
HumanSignallabel-studio6.1MEDIUM

23 January 2024

Label Studio XSS Vulnerability on Avatar Upload
CVE-2023-47115
HumansignalLabel-studio7.1HIGH

13 November 2023

Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio
CVE-2023-47117
HumanSignallabel-studio7.5HIGH

9 November 2023

Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens
CVE-2023-43791
HumansignalLabel-studio9.8CRITICAL