HabitRPG

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

HabitRPG records in CISA KEV

No HabitRPG vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records

TI-2024-35735 CVE-2024-53273

MEDIUM 56

Habitica is an open-source habit-building program.

CVSS 4.0MEDIUM 5.0 Network No auth User interaction EPSS 0.00459 Published 2024-12-11 Fixed in 5.28.5 CWE-79

TI-2024-35734 CVE-2024-53272

MEDIUM 56

Habitica is an open-source habit-building program.

CVSS 4.0MEDIUM 5.0 Network No auth User interaction EPSS 0.00459 Published 2024-12-11 Fixed in 5.28.5 CWE-79

TI-2024-35736 CVE-2024-53274

MEDIUM 44

Habitica is an open-source habit-building program.

CVSS 4.0LOW 2.0 Network No auth User interaction EPSS 0.00459 Published 2024-12-11 Fixed in 5.28.5 CWE-79

TI-2026-39319 CVE-2026-54461

LOW 29

Habitica is a habit tracker application that treats goals like a role-playing game.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00295 Published 2026-09-24 Fixed in 5.48.2 CWE-1333

TI-2022-07246 CVE-2022-23077 · GHSA-87gq-2rrf-c96r

LOW 29

In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00772 Published 2022-06-22 No fix listed CWE-79

TI-2022-07247 CVE-2022-23078 · GHSA-mpqq-mgmj-vv8r

LOW 28

In habitica versions v4.119.0 through v4.232.2 are vulnerable to open redirect via the login page.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.01168 Published 2022-06-22 No fix listed CWE-601