Known Vulnerabilities for ToolJet by ToolJet
Listed below are 10 of the newest known vulnerabilities associated with "ToolJet" by "ToolJet".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-55413 json | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agent... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-55412 json | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agent... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-55411 json | ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agent... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2022-27979 json | A cross-site scripting (XSS) vulnerability in ToolJet v1.6.0 allows attackers to execute arbitrary web scripts or HTML via a ... | 5.4 - MEDIUM | 2023-04-26 | 2023-05-04 |
| CVE-2022-27978 json | Tooljet v1.6 does not properly handle missing values in the API, allowing attackers to arbitrarily reset passwords via a craf... | 7.5 - HIGH | 2023-04-26 | 2023-05-04 |
| CVE-2022-23068 json | ToolJet versions v0.6.0 to v1.10.2 are vulnerable to HTML injection where an attacker can inject malicious code inside the fi... | 5.4 - MEDIUM | 2022-05-18 | 2023-06-27 |
| CVE-2022-23067 json | ToolJet versions v0.5.0 to v1.2.2 are vulnerable to token leakage via Referer header that leads to account takeover . If the ... | 8.8 - HIGH | 2022-05-18 | 2022-05-26 |
| CVE-2022-4111 json | Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pict... | 6.5 - MEDIUM | 2022-11-22 | 2023-07-11 |
| CVE-2022-3422 json | Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see t... | 7.5 - HIGH | 2022-10-07 | 2022-10-07 |
| CVE-2022-3348 json | Just like in the previous report, an attacker could steal the account of different users. But in this case, it's a little bit... | 4.9 - MEDIUM | 2022-09-28 | 2022-09-30 |