bugsink

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

bugsink records in CISA KEV

No bugsink vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bugsink 2 records HIGH

Records

10 records

TI-2026-22000 CVE-2026-27614 · GHSA-vp6q-7m36-pq3w

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

HIGH 75

Bugsink is a self-hosted error tracking tool.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00336 Published 2026-02-25 Fixed in 2.0.13 CWE-79

TI-2025-39901 CVE-2025-64509 · GHSA-rrx3-2x4g-mq2h

Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)

LOW 39

Bugsink is a self-hosted error tracking tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00337 Published 2025-11-10 Fixed in 2.0.6 CWE-770

TI-2025-39900 CVE-2025-64508 · GHSA-fc2v-vcwj-269v

Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input

LOW 39

Bugsink is a self-hosted error tracking tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00506 Published 2025-11-10 Fixed in 2.0.5 CWE-770

TI-2025-34236 CVE-2025-54433 · GHSA-q78p-g86f-jg6q

Bugsink is vulnerable to Path Traversal attacks via event_id in ingestion

LOW 33

Bugsink is a self-hosted error tracking service.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00658 Published 2025-07-30 Fixed in 1.7.4, 1.6.4 +2 CWE-22

TI-2026-28977 CVE-2026-40162 · GHSA-8hw4-fhww-273g

Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble

LOW 31

Bugsink is a self-hosted error tracking tool.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0031 Published 2026-04-10 Fixed in 2.1.1 CWE-20

TI-2026-38922 CVE-2026-53954 · GHSA-5x67-j5xg-c5gj

Bugsink: DOS using large numbers of event tags

LOW 21

Bugsink is a self-hosted error tracking tool.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0056 Published 2026-09-15 Fixed in 2.2.2 CWE-400

TI-2026-32436 CVE-2026-44502 · GHSA-fp53-qcf8-2xx2

Bugsink: SSRF bypass in `validate_webhook_url`

LOW 20

Bugsink is a self-hosted error tracking tool.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00286 Published 2026-05-26 Fixed in 2.1.3 CWE-918

TI-2026-35229 CVE-2026-47728 · GHSA-5389-f7vh-wxj8

Bugsink: Project scoping missing in sourcemap and debug-file lookup

LOW 19

Bugsink is a self-hosted error tracking tool.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-05-26 Fixed in 2.2.0 CWE-862

TI-2026-35217 CVE-2026-47716 · GHSA-g5vc-q7qc-v939

Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

LOW 14

Bugsink is a self-hosted error tracking tool.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00147 Published 2026-05-26 Fixed in 2.2.0 CWE-639

TI-2026-35216 CVE-2026-47715 · GHSA-vx2f-6m6h-9frf

Bugsink: Issue event views can show an event from another project if its UUID is known

LOW 14

Bugsink is a self-hosted error tracking tool.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00154 Published 2026-05-26 Fixed in 2.2.0 CWE-639

Open these records in search →

Critical	1
High	4
Medium	3
Low	2
No CVSS	0