cacti | Snyk

Direct Vulnerabilities

Known vulnerabilities in the cacti package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Open Redirect	<1.2.31-0
L SQL Injection	<1.2.31-0
C OS Command Injection	<1.2.31-0
L CVE-2026-39939	<1.2.31-0
L Directory Traversal	<1.2.31-0
L CVE-2026-39896	<1.2.31-0
L Cross-site Scripting (XSS)	<1.2.31-0
L SQL Injection	<1.2.31-0
L SQL Injection	<1.2.31-0
L CVE-2026-39898	<1.2.31-0
L CVE-2026-39902	<1.2.31-0
M Directory Traversal	<1.2.31-0
H SQL Injection	<1.2.31-0
L CVE-2026-46531	<1.2.31-0
L Session Fixation	<1.2.31-0
L Cross-site Scripting (XSS)	<1.2.31-0
L CVE-2026-1513	<1.2.31-0
L CVE-2026-39895	<1.2.31-0
L CVE-2026-41884	<1.2.31-0
L CVE-2026-44481	<1.2.31-0
L CVE-2026-40078	<1.2.31-0
L CVE-2026-39950	<1.2.31-0
L Information Exposure	<1.2.31-0
L SQL Injection	<1.2.31-0
L Use of Function with Inconsistent Implementations	<1.2.31-0
L CVE-2026-40081	<1.2.31-0
L CVE-2026-39947	<1.2.31-0
L CVE-2026-39949	<1.2.31-0
L CVE-2026-39952	<1.2.31-0
L Improper Verification of Cryptographic Signature	<1.2.31-0
L Directory Traversal	<1.2.31-0
M Information Exposure	<1.2.31-0
L CVE-2026-22802	<1.2.31-0
H SQL Injection	<1.2.27-r0
C Insufficient Comparison	<1.2.27-r0
H SQL Injection	<1.2.27-r0
H SQL Injection	<1.2.29-r0
M Cross-site Scripting (XSS)	<1.2.8-r0
M Cross-site Scripting (XSS)	<1.2.27-r0
H SQL Injection	<1.2.29-r0
H OS Command Injection	<1.2.8-r0
H CVE-2024-31459	<1.2.27-r0
H Cross-site Scripting (XSS)	<1.2.28-r0
M Cross-site Scripting (XSS)	<1.2.27-r0
H SQL Injection	<1.2.26-r0
M Cross-site Scripting (XSS)	<1.2.29-r0
H OS Command Injection	<1.2.8-r0
H SQL Injection	<1.2.27-r0
H Arbitrary Code Injection	<1.2.29-r0
H CVE-2024-25641	<1.2.27-r0
M Cross-site Scripting (XSS)	<1.2.27-r0
M Directory Traversal	<1.2.29-r0
M Cross-site Scripting (XSS)	<1.2.29-r0
H OS Command Injection	<1.2.29-r0
H Cross-site Scripting (XSS)	<1.2.28-r0
H CVE-2025-24367	<1.2.29-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
M Cross-site Scripting (XSS)	<1.2.26-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
H SQL Injection	<1.2.25-r0
M SQL Injection	<1.2.25-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
H SQL Injection	<1.2.26-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
H SQL Injection	<1.2.13-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
M Cross-site Scripting (XSS)	<1.2.13-r0
H Improper Encoding or Escaping of Output	<1.2.13-r0
C Improper Authentication	<1.2.20-r0
M Deserialization of Untrusted Data	<1.2.25-r0
H SQL Injection	<1.2.17-r0
M Cross-site Scripting (XSS)	<1.2.13-r0
M Cross-site Scripting (XSS)	<1.2.26-r0
H OS Command Injection	<1.2.25-r0
H PHP Remote File Inclusion	<1.2.26-r0
M SQL Injection	<1.2.26-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
C SQL Injection	<1.2.25-r0
M Cross-site Scripting (XSS)	<1.2.26-r0
H SQL Injection	<1.2.25-r0
M Cross-site Scripting (XSS)	<1.2.25-r0
H SQL Injection	<1.2.25-r0
M Open Redirect	<1.2.25-r0

Vulnerability

Vulnerable Version

Open Redirect

<1.2.31-0