Appwrite vulnerabilities

Products

• Appwrite 7

Newest

• appwrite Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery CVE-2026-108770 6.9 MediumOctober 11, 2026
• appwrite Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter CVE-2026-89036 8.7 HighSeptember 17, 2026
• appwrite templates Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent CVE-2026-72861 6.9 MediumAugust 20, 2026
• appwrite Appwrite Directory Traversal vulnerability CVE-2022-25377 Fix available 7.5 HighFebruary 22, 2024
• appwrite Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars... CVE-2024-1063 5.3 MediumJanuary 30, 2024
• appwrite command line interface Apprite CLI makes Use of Hard-coded Credentials CVE-2023-50974 Fix available 5.5 MediumJanuary 9, 2024
• appwrite Appwrite Server-Side Request Forgery vulnerability CVE-2023-27159 EPSS 36.4% 7.5 HighMarch 31, 2023
• appwrite, appwrite appwrite/appwrite +1 more Cross-site Scripting (XSS) - Stored in appwrite/appwrite CVE-2022-2925 Fix available 9.0 CriticalSeptember 9, 2022
• appwrite, litespeed.js project litespeed.js +1 more Prototype Pollution CVE-2021-23682 Fix available 7.3 HighFebruary 16, 2022