FL
Product
Flagforge
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 4Medium 1Low 0
Watch
Add Flagforge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-59841 | 9.8 | Sep 25 | FlagForgeCTF's Improper Session Handling Allows Access After Logout Affected: 2.2 before 2.3.1 |
| CVE-2025-59827 | 9.8 | Sep 24 | FlagForgeCTF is Missing Authorization in main-v2 Affected: 2.1.0 |
| CVE-2025-61777 | 9.1 | Oct 6 | FlagForge Allows Unauthenticated Badge Template API Access Affected: 2.0 before 2.3.2 |
| CVE-2025-59932 | 8.2 | Sep 27 | FlagForgeCTF Unauthenticated Resource Modification/Deletion Affected: 2.0 before 2.3.1 |
| CVE-2025-59826 | 7.6 | Sep 23 | FlagForgeCTF Vulnerable to Unauthorized Problem Creation Affected: 2.1.0 |
| CVE-2026-21868 | 7.5 | Jan 8 | Flag Forge has ReDoS Vulnerability in User Profile Lookup API Affected: 2.0 before 2.3.3 |
| CVE-2025-59833 | 7.5 | Sep 24 | FlagForgeCTF Hint Exposure via API Affected: 2.1.0 before 2.3 |
| CVE-2025-59843 | 5.3 | Sep 26 | FlagForgeCTF Exposes User Emails via Public /api/user/[username] API Affected: 2.0 before 2.3.1 |
Showing 8