RE
Product
Retool
by Retool · last CVE Oct 22, 2026
3
CVEs
0
On KEV
7.1
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add Retool to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-42056
6.5
0%
Aug 22
Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into sent data
Affected: 3.18.1 through 3.40.0
CVE-2024-58394
6.1
0%
Oct 22
Retool 3.88.0 XSS via /api/imageProxy SVG Proxying
Affected: before 3.88.0
Showing 2