Read the docs

louislam

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

louislam records in CISA KEV

No louislam vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-51249 CVE-2026-73040 · GHSA-r5ph-2fqc-qvf3

Path traversal in louislam dockge

Priority HIGH 73

Dockge validates a stack name only on the write path.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00936 Published 2026-08-20 No fix listed CWE-22
TI-2026-49952 CVE-2026-71285 · GHSA-pf4v-rpp4-fp6r

Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages

Priority LOW 37

Uptime Kuma's Matomo analytics integration (server/analytics/matomo-analytics.js) injects the admin-configurable Matomo value as a bare, unquoted JavaScript expression inside a <script> block rendered on every public sta…

CVSS 3.1HIGH 8.1 Network High privileges User interaction EPSS 0.00382 Published 2026-08-05 No fix listed CWE-79
TI-2026-83016 CVE-2026-119552 · GHSA-hpf4-7mjx-jmh4

Race condition in Uptime Kuma lets attackers create extra admins

Priority LOW 28

Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows unauthenticated attackers to create an additional administrator account.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00234 Published 2026-10-30 No fix listed CWE-367
Open these records in search →