Bugsink vulnerabilities

Products

• Bugsink 10

Newest

• bugsink Bugsink: DOS using large numbers of event tags CVE-2026-53954 Fix available 4.3 MediumJune 5, 2026
• bugsink Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known CVE-2026-47716 Fix available 3.1 LowMay 26, 2026
• bugsink Bugsink: Issue event views can show an event from another project if its UUID is known CVE-2026-47715 Fix available 3.1 LowMay 26, 2026
• bugsink Bugsink: Project scoping missing in sourcemap and debug-file lookup CVE-2026-47728 Fix available 4.3 MediumMay 26, 2026
• bugsink Bugsink: SSRF bypass in `validate_webhook_url` CVE-2026-44502 Fix available 4.3 MediumMay 8, 2026
• bugsink Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble CVE-2026-40162 Fix available 7.1 HighApril 10, 2026
• bugsink Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering CVE-2026-27614 Fix available 9.3 CriticalFebruary 25, 2026
• bugsink Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU) CVE-2025-64509 Fix available 7.5 HighNovember 10, 2025
• bugsink Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input CVE-2025-64508 Fix available 7.5 HighNovember 10, 2025
• bugsink Bugsink is vulnerable to Path Traversal attacks via event_id in ingestion CVE-2025-54433 Fix available 7.2 HighJuly 29, 2025