Uptime.kuma vulnerabilities

Products

• Uptime Kuma 6

Newest

• uptime.kuma uptime kuma, louislam uptime-kuma +1 more Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh) CVE-2026-33130 6.5 MediumMarch 20, 2026
• uptime.kuma uptime kuma, louislam uptime-kuma +1 more Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page CVE-2026-32230 Fix available 5.3 MediumMarch 12, 2026
• uptime.kuma uptime kuma, dockge.kuma dockge, louislam uptime-kuma +2 more Uptime Kuma Missing Origin Validation in WebSockets CVE-2023-49805 6.0 MediumDecember 11, 2023
• uptime.kuma uptime kuma, dockge.kuma dockge, louislam uptime-kuma +2 more Uptime Kuma Password Change Vulnerability CVE-2023-49804 Fix available 6.7 MediumDecember 11, 2023
• louislam uptime-kuma, uptime.kuma uptime kuma +1 more Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma CVE-2023-49276 Fix available 6.3 MediumNovember 24, 2023
• uptime.kuma uptime kuma, louislam uptime-kuma +1 more Uptime Kuma has Persistentent User Sessions CVE-2023-44400 Fix available 6.7 MediumOctober 9, 2023