Login Request a demo
GR
Product
GROWI
by GROWI, Inc. · last CVE Oct 28, 2026
15
CVEs
0
On KEV
8.3
Max CVSS
4
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 4Medium 11Low 0
Severity
All severities15Critical0High4Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GROWI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25083
8.3
0%
Mar 16
GROWI OpenAI thread/message API endpoints do not perform authorization
Affected: v7.4.5 and earlier
CVE-2026-80191
7.5
0%
Aug 25
GROWI before 8.0.2 Missing Authorization on Attachment Retrieval for Unauthenticated Requests
Affected: before 8.0.2
CVE-2026-41040
7.5
0%
Apr 23
GROWI provided by GROWI, Inc
Affected: v7.5.0 and earlier
CVE-2026-41951
7.2
0%
May 11
Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is running in…
Affected: v7.5.0 and earlier
Showing 4