uptime-kuma-2.4

Direct Vulnerabilities

Known vulnerabilities in the uptime-kuma-2.4 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Inefficient Regular Expression Complexity	*
L Allocation of Resources Without Limits or Throttling	*
L CVE-2026-12151	*
L GHSA-p6gq-j5cr-w38f	*
M Directory Traversal	*
L Resource Exhaustion	*
L Uncontrolled Recursion	*
L CVE-2026-12143	*
L Uncontrolled Recursion	*
C Arbitrary Code Injection	*
C CVE-2026-4800	*
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
H Directory Traversal	*
M CVE-2026-2950	*
L Uncaught Exception	*
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	*
L GHSA-vvjj-xcjg-gr5g	*
L Uncaught Exception	*
H Uncontrolled Recursion	*
L Directory Traversal	*
M Directory Traversal	*
H Use of Uninitialized Resource	*
L OS Command Injection	*
L Improper Handling of Unicode Encoding	*
L Improper Input Validation	*
H Inefficient Regular Expression Complexity	*
L Arbitrary Code Injection	*
L Inefficient Regular Expression Complexity	*
L CVE-2026-3449	*
H Arbitrary Code Injection	*
M Directory Traversal	*
L Algorithmic Complexity	*
L GHSA-c7w3-x93f-qmm8	*
L CVE-2026-8723	*