Product by Gitroom

    Gitroom Postiz

    7 known vulnerabilities in Gitroom Postiz (Gitroom), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gitroom Postiz (Gitroom)
    CriticalCVE-2026-42298

    Gitroomhq Postiz-app: Code Injection

    also in 1 other product

    		10.0
    HighCVE-2026-34577

    Gitroomhq Postiz-app: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		8.6
    HighCVE-2026-40168

    Postiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream

    also in 1 other product

    		8.2
    CriticalCVE-2026-42556

    Postiz stored XSS in public preview page

    also in 1 other product

    		8.9
    CriticalCVE-2026-40487

    Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS

    also in 1 other product

    		9.0
    HighCVE-2026-34576

    Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadata

    also in 1 other product

    		7.7
    MediumCVE-2026-34590

    Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validation

    also in 1 other product

    		5.4

    All products by Gitroom