Louislam vulnerabilities

Products

• Uptime-kuma 13

Newest

• louislam uptime-kuma Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler CVE-2026-119552 6.3 MediumOctober 30, 2026
• louislam dockge Dockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion CVE-2026-73040 8.7 HighAugust 20, 2026
• louislam uptime-kuma Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages CVE-2026-71285 8.1 HighAugust 5, 2026
• uptime.kuma uptime kuma, louislam uptime-kuma +1 more Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh) CVE-2026-33130 6.5 MediumMarch 20, 2026
• uptime.kuma uptime kuma, louislam uptime-kuma +1 more Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page CVE-2026-32230 Fix available 5.3 MediumMarch 12, 2026
• louislam uptime-kuma Local File Inclusion (LFI) via Improper URL Handling in uptime-kuma's `Real-Browser` monitor CVE-2024-56331 Public exploitFix available 6.8 MediumDecember 20, 2024
• uptime.kuma uptime kuma, dockge.kuma dockge, louislam uptime-kuma +2 more Uptime Kuma Missing Origin Validation in WebSockets CVE-2023-49805 6.0 MediumDecember 11, 2023
• uptime.kuma uptime kuma, dockge.kuma dockge, louislam uptime-kuma +2 more Uptime Kuma Password Change Vulnerability CVE-2023-49804 Fix available 6.7 MediumDecember 11, 2023
• louislam uptime-kuma, uptime.kuma uptime kuma +1 more Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma CVE-2023-49276 Fix available 6.3 MediumNovember 24, 2023
• uptime.kuma uptime kuma, louislam uptime-kuma +1 more Uptime Kuma has Persistentent User Sessions CVE-2023-44400 Fix available 6.7 MediumOctober 9, 2023
• louislam uptime-kuma Uptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data loss CVE-2023-36822 Fix available 6.5 MediumJuly 5, 2023
• louislam uptime-kuma Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation CVE-2023-36821 Fix available 8.8 HighJuly 5, 2023
• louislam uptime-kuma Persistent Cross site scripting (XSS) in Uptime Kuma CVE-2023-25811 6.3 MediumFebruary 21, 2023
• louislam uptime-kuma Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma CVE-2023-25810 6.3 MediumFebruary 21, 2023