PO
Product
Postiz
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 3Medium 1Low 0
Watch
Add Postiz to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42298 | 9.8 | May 8 | Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev Affected: before 2.21.7 |
| CVE-2026-42556 | 9.0 | May 8 | Postiz stored XSS in public preview page Affected: 2.21.6 |
| CVE-2026-40487 | 9.0 | Apr 18 | Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS Affected: before 2.21.6 |
Showing 3