Security Advisories · louislam/uptime-kuma · GitHub

Security Advisories

View known security vulnerabilities and report new vulnerabilities privately to maintainers.

Report a vulnerability

Local File Inclusion (LFI) via Improper URL Handling in `Real-Browser` monitor
GHSA-2qgm-m29m-cj2h published Dec 20, 2024 by louislam

Moderate
Enabling Authentication does not close all logged in socket connections immediately
GHSA-23q2-5gf8-gjpp published Apr 19, 2024 by louislam

Low
Changing Password does not close all logged in socket connections immediately
GHSA-88j4-pcx8-q4q3 published Dec 10, 2023 by louislam

Moderate
Missing Origin Validation in WebSockets
GHSA-mj22-23ff-2hrr published Dec 10, 2023 by louislam

Moderate
Authenticated remote code execution via TailscalePing
GHSA-hfxh-rjv7-2369 published Nov 24, 2023 by louislam

Moderate
Attribute Injection leading to XSS(Cross-Site-Scripting)
GHSA-v4v2-8h88-65qj published Nov 24, 2023 by louislam

Moderate
Persistentent User Sessions
GHSA-g9v2-wqcj-j99g published Oct 9, 2023 by louislam

Moderate
Authenticated path traversal via plugin repository name leading to unavailability or data loss
GHSA-vr8x-74pm-6vj7 published Jul 4, 2023 by louislam

Moderate
Authenticated remote code execution via malicious plugin installation
GHSA-7grx-f945-mj96 published Jul 4, 2023 by louislam

High
Persistent XSS through description in status page
GHSA-wh8j-xr66-f296 published Feb 13, 2023 by louislam

Moderate