Priority LOW 36
Coolify before 4.1.1 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate application names across all teams via manual GitHub, GitLab, Bitbucket and Gitea webhooks.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00273 · Published 2026-11-03 · Fixed in 4.1.1 CWE-200
Priority LOW 37
A vulnerability was found in coollabsio Coolify up to 4.1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00498 · Published 2026-09-27 · Fixed in 4.1.1 CWE-287
Priority LOW 37
A flaw has been found in coollabsio Coolify up to 4.1.2.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00454 · Published 2026-09-27 · Fixed in 4.2.0 CWE-862
Priority MEDIUM 43
Coolify through 4.3.17 contains an authentication bypass vulnerability in the OAuth callback handler that signs users into existing accounts based solely on email address without verifying provider assertions or binding…
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00673 · Published 2026-09-05 · No fix listed CWE-287
Priority MEDIUM 41
Coolify before 4.2.0 fails to properly escape environment variable key names in Docker commands executed over SSH on managed servers.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00845 · Published 2026-09-02 · Fixed in 4.2.0 CWE-78
Priority MEDIUM 57
A vulnerability was detected in coollabsio Coolify up to 4.1.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2026-07-12 · No fix listed CWE-862
Priority HIGH 73
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00811 · Published 2026-07-09 · Fixed in 4.0.0-beta.469 CWE-78
Priority MEDIUM 49
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1LOW 3.3· Network · High privileges · No interaction · EPSS 0.0024 · Published 2026-07-07 · Fixed in 4.0.0-beta.474 CWE-78
Priority HIGH 73
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00427 · Published 2026-07-07 · Fixed in 4.0.0-beta.469 CWE-78
Priority MEDIUM 53
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00206 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-918
Priority HIGH 76
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00369 · Published 2026-07-07 · Fixed in 4.0.0-beta.464 CWE-639
Priority HIGH 76
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.00798 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-285
Priority HIGH 73
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00441 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-78
Priority HIGH 73
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00535 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-78
Priority MEDIUM 56
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00324 · Published 2026-07-07 · Fixed in 4.0.0-beta.474 CWE-918
Priority LOW 34
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00402 · Published 2026-07-07 · Fixed in 4.0.0-beta.466 CWE-639
Priority MEDIUM 41
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0065 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-78
Priority MEDIUM 49
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1LOW 3.3· Network · High privileges · No interaction · EPSS 0.00272 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-78
Priority LOW 36
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.0· Network · No auth · User interaction · EPSS 0.00202 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-352
Priority MEDIUM 41
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00785 · Published 2026-07-07 · Fixed in 4.0.0-beta.466 CWE-78
Priority HIGH 73
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00507 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-78
Priority LOW 15
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1LOW 3.1· Network · Low privileges · No interaction · EPSS 0.00394 · Published 2026-07-07 · Fixed in 4.0.0-beta.474 CWE-434
Priority MEDIUM 57
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0017 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-346
Priority HIGH 73
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00447 · Published 2026-07-07 · Fixed in 4.0.0-beta.471 CWE-78
Priority HIGH 73
Coolify is an open-source and self-hostable tool for managing servers, applications, and databases.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00432 · Published 2026-07-07 · Fixed in 4.0.0-beta.466 CWE-78
Load more
THREATIST.IORead the docs