Vulnerabilities

TI-2026-17569 CVE-2026-21868

Flag Forge has ReDoS Vulnerability in User Profile Lookup API

LOW 39

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00312 Published 2026-01-08 Fixed in 2.3.3 CWE-1333

TI-2025-38170 CVE-2025-61777

MEDIUM 49

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00451 Published 2025-10-06 Fixed in 2.3.2 CWE-200

TI-2025-37320 CVE-2025-59932

MEDIUM 43

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00367 Published 2025-09-27 Fixed in 2.3.1 CWE-284

TI-2025-37282 CVE-2025-59843

LOW 37

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2025-09-26 Fixed in 2.3.2 CWE-359

TI-2025-37280 CVE-2025-59841

MEDIUM 49

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00394 Published 2025-09-25 Fixed in 2.3.1 CWE-384

TI-2025-37272 CVE-2025-59833

LOW 39

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00346 Published 2025-09-24 Fixed in 2.3.0 CWE-200

TI-2025-37266 CVE-2025-59827

MEDIUM 48

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00371 Published 2025-09-24 No fix listed CWE-862

TI-2025-37265 CVE-2025-59826

LOW 33

Flag Forge is a Capture The Flag (CTF) platform.

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.00235 Published 2025-09-23 No fix listed CWE-862