bugsink

Products

ProductCVEsExploitedLatest
bugsink10–Sep 15, 2026

Exploited and recent CVEs

  • CVE-2026-53954 Medium 4.3 Bugsink: DOS using large numbers of event tags 0.6%
  • CVE-2026-47716 Low 3.1 Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known 0.1%
  • CVE-2026-47715 Low 3.1 Bugsink: Issue event views can show an event from another project if its UUID is known 0.2%
  • CVE-2026-47728 Medium 4.3 Bugsink: Project scoping missing in sourcemap and debug-file lookup 0.2%
  • CVE-2026-44502 Medium 4.3 Bugsink: SSRF bypass in `validate_webhook_url` 0.3%
  • CVE-2026-40162 High 7.1 Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble 0.3%
  • CVE-2026-27614 Critical 9.3 Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering 0.3%
  • CVE-2025-64509 High 7.5 Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU) 0.3%
  • CVE-2025-64508 High 7.5 Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input 0.5%
  • CVE-2025-54433 High 7.2 Bugsink is vulnerable to Path Traversal attacks via event_id in ingestion 0.7%