Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: PostHog Component: Posthog Clear all filters
TI-2025-01309 CVE-2025-1522 · GHSA-55cg-p3v8-2vr3

Server-side request forgery in PostHog

Priority LOW 30

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00641 Published 2025-04-23 No fix listed CWE-918
TI-2025-01308 CVE-2025-1521 · GHSA-8w5j-q5mj-5jpv

Server-side request forgery in PostHog

Priority LOW 30

PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00667 Published 2025-04-23 No fix listed CWE-918
TI-2025-01307 CVE-2025-1520 · GHSA-v64v-fq96-c5wv

SQL injection in PostHog

Priority LOW 37

PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00469 Published 2025-04-23 No fix listed CWE-89
TI-2024-09007 CVE-2024-9710 · GHSA-jrwm-4975-3g9g

Server-side request forgery in PostHog

Priority LOW 37

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability.

CVSS 3.1HIGH 8.3 Network Low privileges No interaction EPSS 0.00677 Published 2024-11-22 No fix listed CWE-918
TI-2023-25229 CVE-2023-46746

Authenticated PostHog users vulnerable to SSRF

Priority LOW 22

PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-host.

CVSS 3.1MEDIUM 4.8 Local Low privileges User interaction EPSS 0.00381 Published 2023-12-01 No fix listed CWE-918