Gitroom
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 2, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Postiz stored XSS in public preview page
Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev
Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS
Postiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream
Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validation
Postiz: Unauthenticated Full-Read SSRF via /public/stream Endpoint with Trivially Bypassable Extension Check
Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadata
Monitor Gitroom in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.