coollabsio Coolify

• CVE-2026-12815 Medium 6.3 coollabsio coolify Image Name os command injection 1.9%
• CVE-2025-64425 High 8.5 Coolify has host header injection in forgot password 0.4%
• CVE-2025-64424 Critical 9.4 Colify has command injection vulnerability in project git source 2.1%
• CVE-2025-64423 High 7.7 Coolify has a Privilege Escalation - low privileged users can see and use admin invitation links 0.3%
• CVE-2025-64422 Medium 5.5 Rate-limit bypass on login via X-Forwarded-Host header 0.3%
• CVE-2025-64421 High 8.7 Coolify has a privilege escalation - low privileged user can invite themselves as an admin user 0.3%
• CVE-2025-64420 Critical 10.0 Coolify members can see private key of root user 0.5%
• CVE-2025-64419 Critical 9.7 Coolify vulnerable to command injection via docker-compose.yaml parameters 0.7%
• CVE-2025-59955 Medium 5.7 Coolify leaksensitive information `email_change_code` in `/api/v1/teams/{team_id | current}/members` API endpoint 0.3%
• CVE-2025-59158 Critical 9.4 Coolify has Stored XSS in Project Name 0.5%
• CVE-2025-59157 Critical 10.0 Coolify has Git Repository RCE 1.8%
• CVE-2025-59156 Critical 9.4 Coolify has Docker Compose Injection issue 1.0%
• CVE-2025-66213 Critical 9.4 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in File Storage Directory Mount Path 3.3%
• CVE-2025-66212 Critical 9.4 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Dynamic Proxy Configuration Filename 3.3%
• CVE-2025-66211 Critical 9.4 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in PostgreSQL Init Script Filename 2.9%
• CVE-2025-66210 Critical 9.4 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Import 2.9%
• CVE-2025-66209 Critical 10.0 Coolify Vulnerable to Authenticated Remote Code Execution via Command Injection in Database Backup 3.9%
• CVE-2025-24025 Medium 6.1 Coolify Vulnerable to Reflected XSS on Tag Search 0.2%
• CVE-2025-22612 Critical 10.0 Coolify Vulnerable to Private Key Enumeration on Onboarding resulting in Remote Command Execution (RCE) 0.6%
• CVE-2025-22611 Critical 10.0 Coolify vulnerable to Privilege Escalation resulting in Remote Command Execution (RCE) 0.5%
• CVE-2025-22610 Medium 5.7 Coolify Vulnerable to OAuth Secrets Leak 0.4%
• CVE-2025-22609 Critical 10.0 Coolify Vulnerable to Private Key Hijacking / Remote Command Execution (RCE) 0.7%
• CVE-2025-22608 Medium 6.5 Coolify Vulnerable to Revocation of Arbitrary Team Invitations (DOS) 0.4%
• CVE-2025-22607 Medium 4.7 Coolify Vulnerable to GitHub / GitLab OAuth Secrets Leak 0.2%
• CVE-2025-22606 High 8.5 Coolify Command Injection Vulnerability in Project Name 0.3%
• CVE-2025-22605 High 8.5 Coolify OS Command Injection Vulnerability in SSH Command Generation 0.5%