louislam uptime-kuma

• CVE-2026-119552 Medium 4.8 Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler 0.2%
• CVE-2026-71285 High 8.1 Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages 0.4%
• CVE-2026-33130 Medium 6.5 Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh) 0.4%
• CVE-2026-32230 Medium 5.3 Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page 0.9%
• CVE-2024-56331 Medium 6.8 Local File Inclusion (LFI) via Improper URL Handling in uptime-kuma's `Real-Browser` monitor 1.8%
• CVE-2023-49805 Medium 6.0 Uptime Kuma Missing Origin Validation in WebSockets 0.4%
• CVE-2023-49804 Medium 6.7 Uptime Kuma Password Change Vulnerability 0.3%
• CVE-2023-49276 Medium 6.3 Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma 0.5%
• CVE-2023-44400 Medium 6.7 Uptime Kuma has Persistentent User Sessions 0.3%
• CVE-2023-36822 Medium 6.5 Uptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data loss 1.2%
• CVE-2023-36821 High 8.8 Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation 2.0%
• CVE-2023-25811 Medium 6.3 Persistent Cross site scripting (XSS) in Uptime Kuma 0.5%
• CVE-2023-25810 Medium 6.3 Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma 0.4%