GR
Product
grocy
2
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch
Add grocy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-71236 | 8.7 | Aug 5 | Grocy - Stored XSS via HTMLPurifier Output Double-Decode Affected: 0 |
| CVE-2020-15253 | 4.8 | Oct 14 | Versions of Grocy <= 2.7.1 are vulnerable to Cross-Site Scripting via the Create Shopping List module, that is rendered upon deleting that Shopping List Affected: through 2.7.1 |
Showing 2