PostHog

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

PostHog records in CISA KEV

No PostHog vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Posthog · all components

TI-2025-01307 CVE-2025-1520 · GHSA-v64v-fq96-c5wv

LOW 37

PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00469 Published 2025-04-23 No fix listed CWE-89

TI-2024-09007 CVE-2024-9710 · GHSA-jrwm-4975-3g9g

LOW 37

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00677 Published 2024-11-22 No fix listed CWE-918

TI-2025-01309 CVE-2025-1522 · GHSA-55cg-p3v8-2vr3

LOW 30

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00641 Published 2025-04-23 No fix listed CWE-918

TI-2025-01308 CVE-2025-1521 · GHSA-8w5j-q5mj-5jpv

LOW 30

PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00667 Published 2025-04-23 No fix listed CWE-918

TI-2022-00561 CVE-2022-0645 · GHSA-6xh2-f372-cf5m

LOW 29

Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00799 Published 2022-04-19 Fixed in 1.34.1 CWE-601

TI-2023-25229 CVE-2023-46746

LOW 22

PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-host.

CVSS 3.1MEDIUM 4.8 Local Low privileges User interaction EPSS 0.00381 Published 2023-12-01 No fix listed CWE-918