Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

cachethq/cachet

6 known vulnerabilities (1 critical, 4 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 critical, 4 high, 1 medium
Registry
Packagist

Advisories 6

  • CVE-2026-113712Medium 4.8

    Cachet has Stored XSS in Incident Component

    Affected: through 2.4.1.

  • CVE-2023-43661Critical 9.1

    Cachet vulnerable to Authenticated Remote Code Execution

    Affected: fixed in 2.4.

  • Configuration leak

    Affected: fixed in 2.5.1.

  • Forced reinstall

    Affected: fixed in 2.5.1.

  • New line injection during configuration edition

    Affected: fixed in 2.5.1.

  • Unauthenticated SQL Injection

    Affected: through 2.3.18.