Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
BIT-appsmith-2026-49979
  • Bitnami/appsmith
 Appsmith: SSRF via `POST /api/v1/admin/send-test-email` — JavaMail Bypasses WebClient IP Filter 30 Jun
  • Fix available
  • Severity - 5.1 (Medium)
BIT-appsmith-2026-55455
  • Bitnami/appsmith
 Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist 29 Jun
  • Fix available
  • Severity - 9.1 (Critical)
BIT-appsmith-2026-55454
  • Bitnami/appsmith
 Appsmith: Caddy admin API exposed without authentication 29 Jun
  • Fix available
  • Severity - 9.9 (Critical)
BIT-appsmith-2026-50189
  • Bitnami/appsmith
 Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route 29 Jun
  • Fix available
  • Severity - 8.9 (High)
CVE-2026-49979
  • github.com/appsmithorg/appsmith
 Appsmith: SSRF via `POST /api/v1/admin/send-test-email` — JavaMail Bypasses WebClient IP Filter 24 Jun
  • Fix available
  • Severity - 5.1 (Medium)
CVE-2026-55454
  • github.com/appsmithorg/appsmith
 Appsmith: Caddy admin API exposed without authentication 24 Jun
  • Fix available
  • Severity - 9.9 (Critical)
CVE-2026-55455
  • github.com/appsmithorg/appsmith
 Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist 24 Jun
  • Fix available
  • Severity - 5.3 (Medium)
CVE-2026-50189
  • github.com/appsmithorg/appsmith
 Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route 24 Jun
  • Fix available
  • Severity - 8.9 (High)
GHSA-j9gf-vw2f-9hrw
  • Maven/com.appsmith:server
 Appsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation 12 Jun
  • Fix available
  • Severity - 8.1 (High)
GHSA-9wcp-79g5-5c3c
  • Maven/com.appsmith:server
 Appsmith Super User Creation Race Condition Allows Multiple Instance Administrators 12 Jun
  • Fix available
  • Severity - 8.1 (High)
BIT-appsmith-2026-7299
  • Bitnami/appsmith
 CVE-2026-7299 05 Jun
  • Fix available
  • Severity - 6.3 (Medium)
CVE-2026-7299
  • github.com/appsmithorg/appsmith
 CVE-2026-7299 02 Jun
  • Fix available
  • Severity - 6.3 (Medium)
GHSA-h8cj-hpmg-636v
  • Maven/com.appsmith:interfaces
 appsmith has SQL Injection in FilterDataService via Unsafe DROP TABLE Execution 29 Apr
  • Fix available
  • Severity - 7.2 (High)
CVE-2026-5418
  • github.com/appsmithorg/appsmith
 appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery 02 Apr
  • No fix available
  • Severity - 5.5 (Medium)
BIT-appsmith-2026-34411
  • Bitnami/appsmith
 Appsmith < 1.98 Unauthenticated Instance Configuration Disclosure via Management APIs 01 Apr
  • Fix available
  • Severity - 6.9 (Medium)
CVE-2026-34411
  • github.com/appsmithorg/appsmith
 Appsmith < 1.98 Unauthenticated Instance Configuration Disclosure via Management APIs 27 Mar
  • Fix available
  • Severity - 6.9 (Medium)
Load more...