Appsmithorg - vulnerabilities (CVEs)

9 CVEs in 2 products, 0 in the last 30 days, newest from 2026-06-24.

Products

• Appsmith - 8 CVEs
• Appsmithorgappsmith - 1 CVEs

Newest CVEs of Appsmithorg

• CVE-2026-49979 - CVSS 5.1 (medium), 2026-06-24: Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.99, the POST /api/v1/admin/send-test-email endpoint accepts…
• CVE-2026-55454 - CVSS 9.9 (critical), 2026-06-24: Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the bundled Caddy reverse-proxy's admin API — which has no…
• CVE-2026-55455 - CVSS 9.1 (critical), 2026-06-24: Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, the outbound HTTP host filter applied by WebClientUtils (used by…
• CVE-2026-50189 - CVSS 8.9 (high), 2026-06-24: Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on…
• CVE-2026-30862 - CVSS 9.1 (critical), 2026-03-10: Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.96, a Critical Stored XSS vulnerability exists in the Table Widget…
• CVE-2026-24042 - CVSS 9.8 (critical), 2026-01-22: Appsmith is a platform to build admin panels, internal tools, and dashboards. In versions 1.94 and below, publicly accessible apps allow unauthenticated users…
• CVE-2026-22794 - CVSS 9.7 (critical), 2026-01-12: Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 1.93, the server uses the Origin value from the request headers as the…
• CVE-2024-55604 - CVSS 4.8 (medium), 2025-03-25: Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as "App Viewer" should not have access to development information…
• CVE-2022-4096 - CVSS 8.8 (high), 2022-11-21: Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2.