GI
Vendor
gitroomhq
19
CVEs
0
On KEV
4
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-115933 New | PO postiz-app GitroomHQ | 9.9 | Oct 24 | Forged signed tokens let any registered user take over other users and organizations |
| CVE-2026-115932 New | PO postiz-app GitroomHQ | 9.6 | Oct 24 | Path traversal in post media lets any registered user read server files |
| CVE-2026-115931 New | PO postiz-app GitroomHQ | 9.9 | Oct 23 | Arbitrary file read and backend crash through unrestricted provider method calls |
| CVE-2026-107761 | PO postiz-app GitroomHQ | 5.3 | Oct 11 | Channel tokens and organization API key exposed in API responses |
| CVE-2026-94455 | PO postiz-app GitroomHQ | 7.1 | Sep 22 | Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key |
| CVE-2026-94456 | PO postiz-app GitroomHQ | 9.1 | Sep 22 | Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys |
| CVE-2026-19264 | PO postiz-app gitroomhq | 9.8 | Aug 7 | Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover |
| CVE-2026-19127 | PO postiz-app GitroomHQ | 6.5 | Aug 6 | Insufficient verification of lifetime-deal redemption codes allows forgery of permanent paid subscriptions |
| CVE-2026-48799 | PO postiz-app gitroomhq | 7.7 | Jul 15 | Postiz: Unauthenticated arbitrary lifetime PRO grant via Nowpayments webhook |
| CVE-2026-48783 | PO postiz-app gitroomhq | 4.8 | Jun 16 | Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscription |
| CVE-2026-48781 | PO postiz-app gitroomhq | 9.9 | Jun 16 | Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery |
| CVE-2026-42556 | PO postiz-app gitroomhq | 9.0 | May 8 | Postiz stored XSS in public preview page |
| CVE-2026-42346 | PO postiz-app gitroomhq | 6.5 | May 8 | Postiz: TOCTOU DNS rebinding bypasses all SSRF URL validation paths |
| CVE-2026-42298 | PO postiz-app gitroomhq | 9.8 | May 8 | Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev |
| CVE-2026-40487 | PO postiz-app gitroomhq | 9.0 | Apr 18 | Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS |
| CVE-2026-40168 | PO postiz-app gitroomhq | 8.2 | Apr 10 | Postiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream |
| CVE-2026-34590 | PO postiz-app gitroomhq | 5.4 | Apr 2 | Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validation |
| CVE-2026-34577 | PO postiz-app gitroomhq | 8.6 | Apr 2 | Postiz: Unauthenticated Full-Read SSRF via /public/stream Endpoint with Trivially Bypassable Extension Check |
| CVE-2026-34576 | PO postiz-app gitroomhq | 7.7 | Apr 2 | Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadata |