Known Vulnerabilities for Postiz-app by Gitroomhq
Listed below are 6 of the newest known vulnerabilities associated with "Postiz-app" by "Gitroomhq".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115933 json | Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a token ... | Not Provided | 2026-10-24 | 2026-11-02 |
| CVE-2026-115932 json | When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does no... | Not Provided | 2026-10-24 | 2026-11-02 |
| CVE-2026-115931 json | Postiz lets a signed-in user ask the backend to run a function on one of their connected channels. The backend did not restri... | Not Provided | 2026-10-23 | 2026-11-02 |
| CVE-2026-107761 json | Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client... | Not Provided | 2026-10-11 | 2026-10-15 |
| CVE-2026-94456 json | Postiz generates security-sensitive credentials using `Math.random()` instead of a cryptographically secure source. The same ... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-19264 json | Postiz is an open-source social media scheduling tool. The route that serves locally stored media joins URL-supplied path seg... | Not Provided | 2026-08-07 | 2026-08-24 |