Skip to content
OpenAdvisories

Vendor

Chaskiq

6 known vulnerabilities.

Products

Chaskiq 4 chaskiq/chaskiq 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.6
    CVE-2026-111663

    Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation

    Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints,…

    Chaskiq Chaskiq
  • High 8.2
    CVE-2026-72536

    Chaskiq Chaskiq - Missing Authentication

    A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to manipulate any tenant Stripe subscription via the stripeCreateIntent GraphQL mutation. The mutation lacks authentication and authorization chec…

    Chaskiq Chaskiq
  • High 8.2
    CVE-2026-72535

    Chaskiq Chaskiq - Missing Authentication

    A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the stripeCustomerPortal GraphQL mutation. The mutation performs no authentication or au…

    Chaskiq Chaskiq
  • High 7.3
    CVE-2021-3857

    Cross-site Scripting (XSS) - Stored in chaskiq/chaskiq

    chaskiq is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

    Chaskiq chaskiq/chaskiq