CH
Product
chatwoot
4
CVEs
0
On KEV
7.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 3Low 0
Watch
Add chatwoot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-5205 | 6.3 | Mar 31 | chatwoot Webhook API trigger.rb Trigger server-side request forgery Affected: 4.11.0; 4.11.1; 4.11.2 |
| CVE-2025-12246 | 6.1 | Oct 27 | chatwoot Admin IframeLoader.vue cross site scripting Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +2 more |
| CVE-2025-12245 | 5.3 | Oct 27 | chatwoot Widget IFrameHelper.js initPostMessageCommunication origin validation Affected: 4.0; 4.1; 4.2; 4.3; 4.4; 4.5; +2 more |
Showing 3
