Homarr-labs Homarr vulnerabilities
- homarrDOM-Based XSS in Homarr /auth/login Redirect8.8 High
- homarrHomarr has a Race Condition in Invite Token Registration (TOCTOU)4.2 Medium
- homarrHomarr: Unauthenticated Information Disclosure (Integration Metadata Leak)5.3 Medium
- homarrHomarr: Unauthenticated SSRF in rssFeed.ts5.3 Medium
- homarrHomarr affected by Unauthenticated SSRF / Port-Scan Primitive via widget.app.ping5.3 Medium
- homarrHomarr: missing input sanitization and possible privilege escalation through ldap search query injection7.5 High
- homarrHomarr is Vulnerable to Stored Cross-Site Scripting (XSS) and Possible Privilege Escalation via Malicious SVG Upload8.1 High