Bugsink
9 CVEs across 1 Bugsink products. Browse Bugsink vulnerabilities, severities, and proof-of-concept exploits.
Bugsink products with known CVEs
Bugsink CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-47728 | Medium | 4.3 | 2026-05-26 | Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink resolved sourcemaps and debug files by debug ID without scoping that lookup to the projec… |
CVE-2026-47716 | Low | 3.1 | 2026-05-26 | Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, In affected versions, the issue list view authorizes access through the project in the URL, but a… |
CVE-2026-47715 | Low | 3.1 | 2026-05-26 | Bugsink is a self-hosted error tracking tool. Prior to 2.2.0, Bugsink issue event pages accept a direct event identifier from the URL and, in affected versions… |
CVE-2026-44502 | Medium | 4.3 | 2026-05-26 | Bugsink is a self-hosted error tracking tool. Prior to 2.1.3, Bugsink’s webhook URL validation could be (partially) bypassed because of a mismatch in URL parsi… |
CVE-2026-40162 | High | 7.1 | 2026-04-10 | Bugsink is a self-hosted error tracking tool. In 2.1.0, an authenticated file write vulnerability was identified in Bugsink 2.1.0 in the artifact bundle assemb… |
CVE-2026-27614 | Critical | 9.3 | 2026-02-25 | Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.13, an unauthenticated attacker who can submit events to a Bugsink project can store arb… |
CVE-2025-64509 | High | 7.5 | 2025-11-10 | Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.6, a specially crafted Brotli-compressed envelope can cause Bugsink to spend excessive C… |
CVE-2025-64508 | High | 7.5 | 2025-11-10 | Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.5, brotli "bombs" (highly compressed brotli streams, such as many zeros) can be sent to… |
CVE-2025-54433 | | | 2025-07-30 | Bugsink is a self-hosted error tracking service. In versions 1.4.2 and below, 1.5.0 through 1.5.4, 1.6.0 through 1.6.3, and 1.7.0 through 1.7.3, ingestion pat… |