Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

Appwrite vulnerabilities

4 published CVEs name Appwrite among the affected products.

All 4 in the listAtom feed of new CVEs
Published CVEs
4
Last 12 months
2
Critical
1
Known exploited
0

Critical 1High 1Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20221
  2. 20241
  3. 20262

Newest CVEs

  • CVE-2026-89036

    Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter

    appwrite · appwrite

    High8.7
  • CVE-2026-72861

    Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent

    appwrite · templates

    Medium6.9
  • CVE-2024-1063

    Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

    Appwrite · Appwrite

    Medium5.3
  • CVE-2022-2925

    Cross-site Scripting (XSS) - Stored in appwrite/appwrite

    appwrite · appwrite/appwrite

    Critical9.0

Products with the most CVEs

  1. Appwrite2
  2. appwrite/appwrite1
  3. templates1

Most common weaknesses

  1. CWE-347 1
  2. CWE-79 Cross-site scripting (XSS)1
  3. CWE-88 Argument injection1
  4. CWE-918 Server-side request forgery (SSRF)1