Posthog 7 CVEs across 3 Posthog products. Browse Posthog vulnerabilities, severities, and proof-of-concept exploits.
Posthog products with known CVEs Posthog CVEs — newest first CVE Severity Score Published Summary CVE-2025-1522Medium 6.52025-04-23 PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… CVE-2025-1521Medium 6.52025-04-23 PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensiti… CVE-2025-1520High 8.02025-04-23 PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary… CVE-2024-9710High 8.32024-11-22 PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… CVE-2023-46746Medium 4.82023-12-01 PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-host. A server-side request forgery (SSRF… CVE-2023-32325Medium 5.42023-05-27 PostHog-js is a library to interface with the PostHog analytics tool. Versions prior to 1.57.2 have the potential for cross-site scripting. Problem has been pa… CVE-2022-0645Medium 6.12022-04-19 Open redirect vulnerability via endpoint authorize_and_redirect/?redirect= in GitHub repository posthog/posthog prior to 1.34.1.