Contribsys - vulnerabilities (CVEs)
9 CVEs in 2 products, 0 in the last 30 days, newest from 2026-08-25.
Products
Newest CVEs of Contribsys
- CVE-2026-63403 - CVSS 8.7 (high), 2026-08-25: Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the server is vulnerable to an unauthenticated denial of service in which a…
- CVE-2026-63404 - CVSS 7.3 (high), 2026-08-25: Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vulnerable to an insecure temporary file…
- CVE-2023-46951 - CVSS 6.1 (medium), 2024-03-01: Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the…
- CVE-2023-46950 - CVSS 6.1 (medium), 2024-03-01: Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter…
- CVE-2023-37279 - CVSS 7.5 (high), 2023-09-20: Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a…
- CVE-2023-26141 - CVSS 7.5 (high), 2023-09-14: Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker…
- CVE-2023-1892 - CVSS 9.6 (critical), 2023-04-21: Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.
- CVE-2022-23837 - CVSS 7.5 (high), 2022-01-21: In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system,…
- CVE-2021-30151 - CVSS 6.1 (medium), 2021-04-06: Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.
