Skip to contentStoatchat Stoatchat vulnerabilities
- stoatchatstoatchat before 0.15.5 MFA Bypass via Cross-Account TicketCVE-2026-1006797.1 High
- stoatchatstoatchat before 0.15.5 MFA Brute Force via Insufficient Rate LimitingCVE-2026-1006788.3 High
- stoatchatstoatchat before 0.15.5 Account Enumeration via Error LocationCVE-2026-1006776.9 Medium
- stoatchatstoatchat before 0.15.5 Local Filesystem Read via SVGCVE-2026-1006768.8 High
- stoatchatstoatchat before 0.15.5 Denial of Service via mass mentionsCVE-2026-1006757.1 High
- stoatchatstoatchat before 0.15.5 Username Validation Bypass via Unicode SanitizationCVE-2026-1006745.3 Medium
- stoatchatstoatchat before 0.15.0 Missing Authorization via SubscribeCVE-2026-748698.3 High
- stoatchatstoatchat before 0.15.0 Permission Bypass via message_fetchCVE-2026-730597.1 High
- stoatchatstoatchat before 0.15.0 SSRF via IPv6 unspecified address bypassCVE-2026-730586.9 Medium
- stoatchatstoatchat before 0.15.0 Uncapped SVG Rendering Denial of ServiceCVE-2026-730578.7 High
- stoatchatstoatchat < 0.14.0 SSRF via DNS-based IP Blocklist BypassCVE-2026-630887.7 High
- stoatchatstoatchat before 0.7.8 Unrestricted Account CreationCVE-2024-583606.9 Medium
- stoatchatstoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpointsCVE-2026-633069.2 Critical
- stoatchatstoatchat 20241213-1 Webhook Token Disclosure via Read PermissionsCVE-2025-713887.6 High
- stoatchatstoatchat before 20250210-1 Unrestricted Message History FetchCVE-2025-713778.7 High