Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Postiz CRITICAL 9.0
CVE-2026-42556

Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store ar…

Mitigation only
Fix from $2,300 2026-05-08
Postiz CRITICAL 9.8
CVE-2026-42298

Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflo…

Fix: 2.21.7+
Fix from $2,300 2026-05-08
Postiz CRITICAL 9.0
CVE-2026-40487

Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload validation bypass allows any authenticated user to upload arbitr…

Fix: 2.21.6+
Fix from $2,300 2026-04-18
Postiz HIGH 8.2
CVE-2026-40168

Postiz is an AI social media scheduling tool. Prior to 2.21.5, the /api/public/stream endpoint is vulnerable to SSRF. Although the application valida…

Fix: 2.21.5+
Fix from $1,950 2026-04-10
Postiz HIGH 8.6
CVE-2026-34577

Postiz is an AI social media scheduling tool. Prior to version 2.21.3, the GET /public/stream endpoint in PublicController accepts a user-supplied ur…

Fix: 2.21.3+
Fix from $1,950 2026-04-02
Postiz HIGH 7.7
CVE-2026-34576

Postiz is an AI social media scheduling tool. Prior to version 2.21.3, the POST /public/v1/upload-from-url endpoint accepts a user-supplied URL and f…

Fix: 2.21.3+
Fix from $1,950 2026-04-02
Postiz MEDIUM 5.4
CVE-2026-34590

Postiz is an AI social media scheduling tool. Prior to version 2.21.4, the POST /webhooks/ endpoint for creating webhooks uses WebhooksDto which vali…

Fix: 2.21.4+
Fix from $1,600 2026-04-02