bugsink vulnerabilities
10 published CVEs name bugsink among the affected products.
- 10Published CVEs10 of them scored
- 7Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-53954
Bugsink: DOS using large numbers of event tags
bugsink · bugsink
Medium4.3 - CVE-2026-47716
Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known
bugsink · bugsink
Low3.1 - CVE-2026-47715
Bugsink: Issue event views can show an event from another project if its UUID is known
bugsink · bugsink
Low3.1 - CVE-2026-47728
Bugsink: Project scoping missing in sourcemap and debug-file lookup
bugsink · bugsink
Medium4.3 - CVE-2026-44502
Bugsink: SSRF bypass in `validate_webhook_url`
bugsink · bugsink
Medium4.3 - CVE-2026-40162
Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble
bugsink · bugsink
High7.1 - CVE-2026-27614
Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering
bugsink · bugsink
Critical9.3 - CVE-2025-64509
Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)
bugsink · bugsink
High7.5 - CVE-2025-64508
Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input
bugsink · bugsink
High7.5 - CVE-2025-54433
Bugsink is vulnerable to Path Traversal attacks via event_id in ingestion
bugsink · bugsink
High7.2