Security: opencats/OpenCATS
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Authenticated SQL Injection via `period`,`startDate` and `endDate` Parameter in both affected DataGrid classesGHSA-cp24-hjrx-2pm5 published
Jun 22, 2026 by anonymoususer72041High -
Authenticated Remote Code Execution via SettingsUI (manageProfessional)GHSA-627w-743r-4cg2 published
Jun 22, 2026 by RussHHigh -
Authenticated RCE in the Import module of OpenCATSGHSA-v9gx-5qhj-jf7c published
Jun 14, 2026 by anonymoususer72041Critical -
SQL injection in DataGrid filter handling for non-filterable Tags columnGHSA-gmpc-j6h7-vw74 published
Apr 23, 2026 by anonymoususer72041High -
SQL Injection in DataGrid sortDirection parameterGHSA-8mc8-5gw6-c7w4 published
Apr 23, 2026 by anonymoususer72041High