Skip to content
OpenAdvisories

Package · npm

uptime-kuma

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2023-36821

    Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation

    Uptime Kuma, a self-hosted monitoring tool, allows an authenticated attacker to install a maliciously crafted plugin in versions prior to 1.22.1, which may lead to remote code execution. Uptime Kuma allows authenticated users to install plugins from an offici…

    louislam uptime-kuma uptime-kuma npm