Contribsys

9 CVEs across 2 Contribsys products. Browse Contribsys vulnerabilities, severities, and proof-of-concept exploits.

Contribsys products with known CVEs

ProductCVEs
Sidekiq6
Faktory3
Contribsys CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-634042026-08-25Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vulnerable to an insecure temporary file…
CVE-2026-634032026-08-25Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the server is vulnerable to an unauthenticated denial of service in which a…
CVE-2023-46951Medium6.12024-03-01Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted payload to the uniquejo…
CVE-2023-46950Medium6.12024-03-01Cross Site Scripting vulnerability in Contribsys Sidekiq v.6.5.8 allows a remote attacker to obtain sensitive information via a crafted URL to the filter funct…
CVE-2023-37279High7.52023-09-20Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a craft…
CVE-2023-26141High7.52023-09-14Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file. An attacker…
CVE-2023-1892Critical9.62023-04-21Cross-site Scripting (XSS) - Reflected in GitHub repository sidekiq/sidekiq prior to 7.0.8.
CVE-2022-23837High7.52022-01-21In api.rb in Sidekiq before 5.2.10 and 6.4.0, there is no limit on the number of days when requesting stats for the graph. This overloads the system, affecting…
CVE-2021-30151Medium6.12021-04-06Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used.