Homarr-labs vulnerabilities
Products
- Homarr 7
Newest
- homarr DOM-Based XSS in Homarr /auth/login Redirect 8.8 High
- homarr Homarr has a Race Condition in Invite Token Registration (TOCTOU) 4.2 Medium
- homarr Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak) 5.3 Medium
- homarr Homarr: Unauthenticated SSRF in rssFeed.ts 5.3 Medium
- homarr Homarr affected by Unauthenticated SSRF / Port-Scan Primitive via widget.app.ping 5.3 Medium
- homarr Homarr: missing input sanitization and possible privilege escalation through ldap search query injection 7.5 High
- homarr Homarr is Vulnerable to Stored Cross-Site Scripting (XSS) and Possible Privilege Escalation via Malicious SVG Upload 8.1 High