Log in Start free

Appwrite

Products

ProductCVEsExploitedLatest
Appwrite2–Sep 17, 2026
appwrite/appwrite1–Sep 9, 2022
templates1–Aug 20, 2026

Exploited and recent CVEs

  • CVE-2026-89036 High 8.8 Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter 0.7%
  • CVE-2026-72861 Medium 5.8 Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent 0.3%
  • CVE-2024-1063 Medium 5.3 Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159. 0.4%
  • CVE-2022-2925 Critical 9.0 Cross-site Scripting (XSS) - Stored in appwrite/appwrite 0.8%