tgstation13
Security Risk Profile
62
/100
highSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 24, 2018 to present
7
Total CVEs
6
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
8.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
62/100
high
Severity Distribution
Critical
2High
4Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
Infoleak
1
Most Affected Products
1. Tgstation13 Tgstation-server8
2. tgstation tgstation-server1
3. nuget/Tgstation.Server.Host1
4. nuget/Tgstation.Server.Api1
Recent Vulnerabilities
See more →CVE-2025-21611
CVSS 8.8EPSS 0%high
tgstation-server's role authorization incorrectly OR'd with user's enabled status
1/6/2025
CVE-2024-41799
CVSS 9.9critical
tgstation-server's DreamMaker environment files outside the deployment directory can be compiled and ran by insufficiently permissioned users
7/29/2024
CVE-2023-34243
CVSS 5.8medium
Windows user name disclosure in TGstation
6/8/2023🔧 No Patch
CVE-2023-33198
CVSS 7.5high
Incorrectly Specified Chat Message Destinations in tgstation-server and DreamMaker API
5/30/2023🔧 No Patch
CVE-2023-32687
CVSS 7.7high
Insufficiently Protected ChatBot Credentials in tgstation-server
5/29/2023
CVE-2020-16136
CVSS 7.7high
7/31/2020🔧 No Patch
CVE-2018-17107
CVSS 9.8critical
9/24/2018🔧 No Patch
Monitor tgstation13 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.