louislam vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 20241
3. 20265

Newest CVEs

• CVE-2026-119552

  Uptime Kuma through 2.5.8 Race Condition Admin Creation via Setup Handler

  louislam · uptime-kuma

  Medium6.3
• CVE-2026-73040

  Dockge Path Traversal via Unvalidated Stack Name Allows Arbitrary Compose and .env Disclosure and Arbitrary Directory Deletion

  louislam · dockge

  High8.7
• CVE-2026-71285

  Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages

  louislam · uptime-kuma

  High8.1
• CVE-2026-33130

  Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh)

  louislam · uptime-kuma

  Medium6.5
• CVE-2026-32230

  Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page

  louislam · uptime-kuma

  Medium5.3
• CVE-2024-56331

  Local File Inclusion (LFI) via Improper URL Handling in uptime-kuma's `Real-Browser` monitor

  louislam · uptime-kuma

  Medium6.8
• CVE-2023-49805

  Uptime Kuma Missing Origin Validation in WebSockets

  louislam · uptime-kuma

  Medium6.0
• CVE-2023-49804

  Uptime Kuma Password Change Vulnerability

  louislam · uptime-kuma

  Medium6.7
• CVE-2023-49276

  Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma

  louislam · uptime-kuma

  Medium6.3
• CVE-2023-44400

  Uptime Kuma has Persistentent User Sessions

  louislam · uptime-kuma

  Medium6.7