PostHog

Products

Exploited and recent CVEs

• CVE-2025-1522 High 7.1 PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability 0.6%
• CVE-2025-1521 High 7.1 PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability 0.7%
• CVE-2025-1520 High 7.1 PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability 0.5%
• CVE-2024-9710 High 7.1 PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability 0.7%
• CVE-2023-46746 Medium 4.8 Authenticated PostHog users vulnerable to SSRF 0.4%
• CVE-2023-32325 Medium 5.4 Cross-site scripting in PostHog-js 0.4%
• CVE-2022-0645 Medium 6.1 Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in posthog/posthog 0.8%