PostHog vulnerabilities
7 published CVEs name PostHog among the affected products.
- Published CVEs
- 7
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 0
Critical 0High 4Medium 3Low 0Not scored 0
CVEs per yearBy the year they were published
- 20221
- 20232
- 20241
- 20253
Newest CVEs
- CVE-2025-1522
PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability
PostHog · PostHog
High7.1 - CVE-2025-1521
PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability
PostHog · PostHog
High7.1 - CVE-2025-1520
PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability
PostHog · PostHog
High7.1 - CVE-2024-9710
PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability
PostHog · PostHog
High7.1 - CVE-2023-46746
Authenticated PostHog users vulnerable to SSRF
PostHog · posthog
Medium4.8 - CVE-2023-32325
Cross-site scripting in PostHog-js
PostHog · posthog-js
Medium5.4 - CVE-2022-0645
Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in posthog/posthog
posthog · posthog/posthog
Medium6.1