What’s Vulnerable › Products

gitroomhq postiz-app vulnerabilities

20 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.

Check whether your gitroomhq postiz-app version is affected

Latest gitroomhq postiz-app vulnerabilities

• CVE-2026-115933 — Forged signed tokens let any registered user take over other users and organizations (CVSS 9.9)
• CVE-2026-115932 — Path traversal in post media lets any registered user read server files (CVSS 9.6)
• CVE-2026-115931 — Arbitrary file read and backend crash through unrestricted provider method calls (CVSS 9.9)
• CVE-2026-107761 — Channel tokens and organization API key exposed in API responses (CVSS 5.3)
• CVE-2026-94456 — Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys (CVSS 9.1)
• CVE-2026-94455 — Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key (CVSS 7.1)
• CVE-2026-19264 — Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover (CVSS 9.8)
• CVE-2026-19127 — Insufficient verification of lifetime-deal redemption codes allows forgery of permanent paid subscriptions (CVSS 6.5)
• CVE-2026-48799 — Postiz: Unauthenticated arbitrary lifetime PRO grant via Nowpayments webhook (CVSS 7.7)
• CVE-2026-48783 — Postiz has an unauthenticated billing-enforcement bypass via /public/modify-subscription (CVSS 4.8)
• CVE-2026-48781 — Postiz has cross-tenant SUPERADMIN takeover via Skool-provider JWT forgery (CVSS 9.9)
• CVE-2026-42556 — Postiz stored XSS in public preview page (CVSS 9.0)
• CVE-2026-42346 — Postiz: TOCTOU DNS rebinding bypasses all SSRF URL validation paths (CVSS 6.5)
• CVE-2026-42298 — Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev (CVSS 9.8)
• CVE-2026-40487 — Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS (CVSS 9.0)
• CVE-2026-40168 — Postiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream (CVSS 8.2)
• CVE-2026-34590 — Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validation (CVSS 5.4)
• CVE-2026-34577 — Postiz: Unauthenticated Full-Read SSRF via /public/stream Endpoint with Trivially Bypassable Extension Check (CVSS 8.6)
• CVE-2026-34576 — Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadata (CVSS 7.7)
• CVE-2025-53641 — Postiz allows header mutation in middleware facilitates resulting in SSRF (CVSS 8.2)