Priority MEDIUM 64
Checkmate through 3.11.0 omits the isAllowed role guard middleware on maintenance-window, notification, and check-deletion routes, allowing read-only users to perform administrative actions.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00486 · Published 2026-09-03 · No fix listed CWE-862
Priority LOW 39
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00482 · Published 2026-08-21 · Fixed in 3.9.2 CWE-200
Priority MEDIUM 56
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00587 · Published 2026-08-21 · Fixed in 3.9.2 CWE-1333
Priority HIGH 72
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00618 · Published 2026-08-21 · Fixed in 3.9.1 CWE-400
Priority LOW 30
A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine whether a given email address is registered.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0042 · Published 2026-08-10 · No fix listed CWE-204
Priority HIGH 70
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00307 · Published 2026-03-20 · No fix listed CWE-269
Priority MEDIUM 63
Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00435 · Published 2026-03-07 · Fixed in 3.4.0 CWE-200