Browse CVEs

CRITICAL 9.0 CVE-2026-42556 Postiz is an AI social media scheduling tool. From version 2.21.6 to before version 2.21.7, any authenticated user who can create a post can store ar… Postiz Mitigation only Fix from $2,3002026-05-08 CRITICAL 9.8 CVE-2026-42298 Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Image workflo… Postiz 2.21.7+ Fix from $2,3002026-05-08 CRITICAL 9.0 CVE-2026-40487 Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload validation bypass allows any authenticated user to upload arbitr… Postiz 2.21.6+ Fix from $2,3002026-04-18 HIGH 8.2 CVE-2026-40168 Postiz is an AI social media scheduling tool. Prior to 2.21.5, the /api/public/stream endpoint is vulnerable to SSRF. Although the application valida… Postiz 2.21.5+ Fix from $1,9502026-04-10 HIGH 8.6 CVE-2026-34577 Postiz is an AI social media scheduling tool. Prior to version 2.21.3, the GET /public/stream endpoint in PublicController accepts a user-supplied ur… Postiz 2.21.3+ Fix from $1,9502026-04-02 HIGH 7.7 CVE-2026-34576 Postiz is an AI social media scheduling tool. Prior to version 2.21.3, the POST /public/v1/upload-from-url endpoint accepts a user-supplied URL and f… Postiz 2.21.3+ Fix from $1,9502026-04-02 MEDIUM 5.4 CVE-2026-34590 Postiz is an AI social media scheduling tool. Prior to version 2.21.4, the POST /webhooks/ endpoint for creating webhooks uses WebhooksDto which vali… Postiz 2.21.4+ Fix from $1,6002026-04-02