CH
Product
chatwoot
by · last CVE Mar 31, 2026
4
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch

Add chatwoot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-5205
6.3
0%
Mar 31
chatwoot Webhook API trigger.rb Trigger server-side request forgery
Affected: 4.11.0; 4.11.1; 4.11.2
CVE-2025-12246
6.1
0%
Oct 27
chatwoot Admin IframeLoader.vue cross site scripting
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +2 more
CVE-2025-12245
5.3
0%
Oct 27
chatwoot Widget IFrameHelper.js initPostMessageCommunication origin validation
Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +2 more
Showing 3