Skip to content
OpenAdvisories

Product · gotify

server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-102603

    Gotify: Insufficiently Protected Password Change endpoint

    Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint (POST /current/user/password) accepts a valid client token without requiring the account's current password or another…

    gotify server github.com/gotify/server/v2 github.com/gotify/server Go
  • Medium 6.1
    CVE-2022-46181

    Gotify server XSS vulnerability in the application image file upload

    Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Versions prior to 2.2.2 contain an XSS vulnerability that allows authenticated users to upload .html files. An attacker could execute client side scripts **if** an…

    gotify server github.com/gotify/server github.com/gotify/server/v2 Go