tgstation

Products

ProductCVEsExploitedLatest
tgstation-server5–Jan 6, 2025

Exploited and recent CVEs

  • CVE-2025-21611 High 8.8 tgstation-server's role authorization incorrectly OR'd with user's enabled status 0.5%
  • CVE-2024-41799 High 8.4 tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users 1.2%
  • CVE-2023-34243 Medium 5.8 Windows user name disclosure in TGstation 0.5%
  • CVE-2023-33198 Medium 6.1 Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API 0.6%
  • CVE-2023-32687 High 7.7 Insufficiently Protected ChatBot Credentials in tgstation-server 0.6%