Chaskiq

6 CVEs in 2 Chaskiq products, including Chaskiq, Chaskiq/chaskiq. Newest: CVE-2026-111663 (2026-10-16). Severity, EPSS and public exploits for each.

Chaskiq products with known CVEs

ProductCVEs
Chaskiq6
Chaskiq/chaskiq2
Chaskiq CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-111663High8.62026-10-16Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUploa…
CVE-2026-111662Medium5.82026-10-16Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via th…
CVE-2026-72536High8.62026-08-11A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to manipulate any tenant Stripe subscription v…
CVE-2026-72535High8.62026-08-11A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any…
CVE-2021-3857Medium5.42022-01-17chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3853Medium6.12022-01-17chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')