Skip to content
OpenAdvisories

Package · npm

@posthog/plugin-server

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2025-1520

    PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability

    PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PostHog. Authentication is required to exploit this vulnerability…

    PostHog PostHog @posthog/plugin-server npm