Skip to contentUptime.kuma Uptime Kuma vulnerabilities
- uptime.kuma uptime kuma, louislam uptime-kuma +1 moreUptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)CVE-2026-331306.5 Medium
- uptime.kuma uptime kuma, louislam uptime-kuma +1 moreUptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status pageCVE-2026-32230Fix available5.3 Medium
- uptime.kuma uptime kuma, dockge.kuma dockge, louislam uptime-kuma +2 moreUptime Kuma Missing Origin Validation in WebSocketsCVE-2023-498056.0 Medium
- uptime.kuma uptime kuma, dockge.kuma dockge, louislam uptime-kuma +2 moreUptime Kuma Password Change VulnerabilityCVE-2023-49804Fix available6.7 Medium
- louislam uptime-kuma, uptime.kuma uptime kuma +1 moreAttribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kumaCVE-2023-49276Fix available6.3 Medium
- uptime.kuma uptime kuma, louislam uptime-kuma +1 moreUptime Kuma has Persistentent User SessionsCVE-2023-44400Fix available6.7 Medium