Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

bugsink vulnerabilities

10 published CVEs name bugsink among the affected products.

Newest CVEs

  • CVE-2026-53954

    Bugsink: DOS using large numbers of event tags

    bugsink · bugsink

    Medium4.3
  • CVE-2026-47716

    Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

    bugsink · bugsink

    Low3.1
  • CVE-2026-47715

    Bugsink: Issue event views can show an event from another project if its UUID is known

    bugsink · bugsink

    Low3.1
  • CVE-2026-47728

    Bugsink: Project scoping missing in sourcemap and debug-file lookup

    bugsink · bugsink

    Medium4.3
  • CVE-2026-44502

    Bugsink: SSRF bypass in `validate_webhook_url`

    bugsink · bugsink

    Medium4.3
  • CVE-2026-40162

    Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble

    bugsink · bugsink

    High7.1
  • CVE-2026-27614

    Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

    bugsink · bugsink

    Critical9.3
  • CVE-2025-64509

    Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)

    bugsink · bugsink

    High7.5
  • CVE-2025-64508

    Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input

    bugsink · bugsink

    High7.5
  • CVE-2025-54433

    Bugsink is vulnerable to Path Traversal attacks via event_id in ingestion

    bugsink · bugsink

    High7.2