HabitRPG

Products

ProductCVEsExploitedLatest
habatica3–Dec 11, 2024
habitica1–Sep 24, 2026

Exploited and recent CVEs

  • CVE-2026-54461 Medium 6.5 Habitica: Regex Injection / ReDoS in Member Search 0.3%
  • CVE-2024-53274 Low 2.0 GHSL-2024-111: Reflected XSS in /home in habitica 0.5%
  • CVE-2024-53273 Medium 5.0 GHSL-2024-110: Reflected XSS in /register in habitica 0.5%
  • CVE-2024-53272 Medium 5.0 GHSL-2024-109: Reflected XSS in /login in habitica 0.5%