Skip to contentBlueprintue Blueprintue-self-hosted-edition vulnerabilities
- blueprintue blueprintue-self-hosted-editionblueprintUE Self-Hosted Edition before 4.3.6 Arbitrary Iframe Embedding via PeerTube MatcherCVE-2026-1268144.8 Medium
- blueprintue blueprintue-self-hosted-editionblueprintUE Self-Hosted Edition before 4.3.7 Empty MariaDB Root Password via Docker ComposeCVE-2026-1268129.3 Critical
- blueprintue blueprintue-self-hosted-editionBlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 Storage Exhaustion via Anonymous BlueprintsCVE-2026-1266598.7 High
- blueprintue blueprintue-self-hosted-editionblueprintUE Self-Hosted Edition before 4.3.3 Account Enumeration via Password ResetCVE-2026-1221396.9 Medium
- blueprintue blueprintue-self-hosted-editionBlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 Login Rate Limit BypassCVE-2026-1221386.3 Medium
- blueprintue blueprintue-self-hosted-editionblueprintUE Self-Hosted Edition before 4.3.4 Non-Expiring Account Confirmation TokensCVE-2026-1217356.3 Medium
- blueprintue blueprintue-self-hosted-editionblueprintUE: Authenticated Password Change Does Not Verify Current PasswordCVE-2026-405888.1 High
- blueprintue blueprintue-self-hosted-editionblueprintUE: Active Sessions Are Not Invalidated After Password Change or ResetCVE-2026-405876.5 Medium
- blueprintue blueprintue-self-hosted-editionblueprintUE: Login Endpoint Has No Rate Limiting, Lockout, or Brute-Force ProtectionCVE-2026-405867.5 High
- blueprintue blueprintue-self-hosted-editionblueprintUE: Password Reset Tokens Have No Expiry WindowCVE-2026-405857.4 High