Skip to content
OpenAdvisories

Vendor

Rocket.Chat

16 known vulnerabilities.

Products

Rocket.Chat 14 Rocket.Chat Desktop 1 Mobile 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-29198 Public exploit

    In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability …

    Rocket.Chat Rocket.Chat
  • High 8.6
    CVE-2024-39713 Public exploit

    Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability

    A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.

    Rocket.Chat Rocket.Chat rocket.chat npm