Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-6489
  • Go/github.com/pocketbase/pocketbase
 Pocketbase: Unhandled panic in worker goroutines in... yesterday
  • Fix available
GHSA-84vh-m24q-wjjx
  • Go/github.com/pocketbase/pocketbase
 Pocketbase: Unhandled panic in worker goroutines 17 Sep
  • Fix available
  • Severity - 8.7 (High)
CVE-2026-82410
  • github.com/pocketbase/pocketbase
 Pocketbase: Unhandled panic in worker goroutines 16 Sep
  • Fix available
  • Severity - 8.7 (High)
GO-2026-5548
  • Go/github.com/pocketbase/pocketbase
 PocketBase: Account pre-hijacking via OAuth2 autolinking upgrade in github.com/pocketbase/pocketbase 24 Jul
  • Fix available
CVE-2026-44166
  • github.com/pocketbase/pocketbase
 Pocketbase: Account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade 12 May
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-pq7p-mc74-g65w
  • Go/github.com/pocketbase/pocketbase
 PocketBase vulnerable to account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade 05 May
  • Fix available
  • Severity - 6.1 (Medium)
openSUSE-SU-2026:10628-1
  • openSUSE:Tumbleweed/pocketbase
 pocketbase-0.37.3-1.1 on GA media 27 Apr
  • Fix available
GO-2024-2936
  • Go/github.com/pocketbase/pocketbase
 PocketBase performs password auth and OAuth2 unverified email linking in github.com/pocketbase/pocketbase 01 Jul 2024
  • Fix available
GHSA-m93w-4fxv-r35v
  • Go/github.com/pocketbase/pocketbase
 PocketBase performs password auth and OAuth2 unverified email linking 18 Jun 2024
  • Fix available
  • Severity - 5.4 (Medium)
CVE-2024-38351
  • github.com/pocketbase/pocketbase
 Password auth and OAuth2 unverified email linking 18 Jun 2024
  • Fix available
  • Severity - 5.4 (Medium)