Vulnerabilities

TI-2026-38922 CVE-2026-53954 · GHSA-5x67-j5xg-c5gj

Bugsink: DOS using large numbers of event tags

LOW 21

Bugsink is a self-hosted error tracking tool.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0056 Published 2026-09-15 Fixed in 2.2.2 CWE-400

TI-2026-35217 CVE-2026-47716 · GHSA-g5vc-q7qc-v939

Bugsink: Issue bulk actions can affect another project’s issue if its UUID is known

LOW 14

Bugsink is a self-hosted error tracking tool.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00147 Published 2026-05-26 Fixed in 2.2.0 CWE-639

TI-2026-35216 CVE-2026-47715 · GHSA-vx2f-6m6h-9frf

Bugsink: Issue event views can show an event from another project if its UUID is known

LOW 14

Bugsink is a self-hosted error tracking tool.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00154 Published 2026-05-26 Fixed in 2.2.0 CWE-639

TI-2026-35229 CVE-2026-47728 · GHSA-5389-f7vh-wxj8

Bugsink: Project scoping missing in sourcemap and debug-file lookup

LOW 19

Bugsink is a self-hosted error tracking tool.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00178 Published 2026-05-26 Fixed in 2.2.0 CWE-862

TI-2026-32436 CVE-2026-44502 · GHSA-fp53-qcf8-2xx2

Bugsink: SSRF bypass in `validate_webhook_url`

LOW 20

Bugsink is a self-hosted error tracking tool.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00286 Published 2026-05-26 Fixed in 2.1.3 CWE-918

TI-2026-28977 CVE-2026-40162 · GHSA-8hw4-fhww-273g

Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble

LOW 31

Bugsink is a self-hosted error tracking tool.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0031 Published 2026-04-10 Fixed in 2.1.1 CWE-20

TI-2026-22000 CVE-2026-27614 · GHSA-vp6q-7m36-pq3w

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

HIGH 75

Bugsink is a self-hosted error tracking tool.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00336 Published 2026-02-25 Fixed in 2.0.13 CWE-79

TI-2025-39901 CVE-2025-64509 · GHSA-rrx3-2x4g-mq2h

Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)

LOW 39

Bugsink is a self-hosted error tracking tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00337 Published 2025-11-10 Fixed in 2.0.6 CWE-770

TI-2025-39900 CVE-2025-64508 · GHSA-fc2v-vcwj-269v

Bugsink vulnerable to unauthenticated remote DoS via crafted Brotli input

LOW 39

Bugsink is a self-hosted error tracking tool.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00506 Published 2025-11-10 Fixed in 2.0.5 CWE-770

TI-2025-34236 CVE-2025-54433 · GHSA-q78p-g86f-jg6q

Bugsink is vulnerable to Path Traversal attacks via event_id in ingestion

LOW 33

Bugsink is a self-hosted error tracking service.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00658 Published 2025-07-30 Fixed in 1.7.4, 1.6.4 +2 CWE-22

Vulnerabilities

Filters