Stoatchat vulnerabilities

Products

• Stoatchat 15

Newest

• stoatchat stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket CVE-2026-100679 7.1 HighSeptember 26, 2026
• stoatchat stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting CVE-2026-100678 8.3 HighSeptember 26, 2026
• stoatchat stoatchat before 0.15.5 Account Enumeration via Error Location CVE-2026-100677 6.9 MediumSeptember 26, 2026
• stoatchat stoatchat before 0.15.5 Local Filesystem Read via SVG CVE-2026-100676 8.8 HighSeptember 26, 2026
• stoatchat stoatchat before 0.15.5 Denial of Service via mass mentions CVE-2026-100675 7.1 HighSeptember 26, 2026
• stoatchat stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization CVE-2026-100674 5.3 MediumSeptember 26, 2026
• stoatchat stoatchat before 0.15.0 Missing Authorization via Subscribe CVE-2026-74869 8.3 HighAugust 17, 2026
• stoatchat stoatchat before 0.15.0 Permission Bypass via message_fetch CVE-2026-73059 7.1 HighAugust 16, 2026
• stoatchat stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass CVE-2026-73058 6.9 MediumAugust 16, 2026
• stoatchat stoatchat before 0.15.0 Uncapped SVG Rendering Denial of Service CVE-2026-73057 8.7 HighAugust 16, 2026
• stoatchat stoat for android Stoat for Android Internal File Disclosure via Exported ShareTargetActivity URI Validation CVE-2026-57848 6.8 MediumJuly 18, 2026
• stoatchat stoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypass CVE-2026-63088 7.7 HighJuly 16, 2026
• stoatchat stoatchat before 0.7.8 Unrestricted Account Creation CVE-2024-58360 6.9 MediumJuly 16, 2026
• stoatchat stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints CVE-2026-63306 9.2 CriticalJuly 16, 2026
• stoatchat stoatchat 20241213-1 Webhook Token Disclosure via Read Permissions CVE-2025-71388 7.6 HighJuly 16, 2026
• stoatchat stoatchat before 20250210-1 Unrestricted Message History Fetch CVE-2025-71377 8.7 HighJuly 16, 2026