Pocketbase

3 CVEs in 1 Pocketbase product, including Pocketbase. Newest: CVE-2026-82410 (2026-09-16). Severity, EPSS and public exploits for each.

Pocketbase products with known CVEs

ProductCVEs
Pocketbase3
Pocketbase CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-824102026-09-16Pocketbase is an open source web backend written in go. Prior to 0.22.48 and 0.39.7, PocketBase's panic-recovery middleware covers regular request handling but…
CVE-2026-44166High7.62026-05-12Pocketbase is an open source web backend written in go. Prior to 0.22.42 and 0.37.4, in some situations, if an attacker knows the email address of the victim t…
CVE-2024-38351Medium5.42024-06-18Pocketbase is an open source web backend written in go. In affected versions a malicious user may be able to compromise other user accounts. In order to be exp…