Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how posthog compares to other vendors in security performance

View Risk Score →

The RegisterPostHog admits Shai-Hulud 2.0 was its biggest ever security bungle

First published (updated )
News
The Register

BleepingComputerShai-Hulud malware infects 500 npm packages, leaks secrets on GitHub

First published (updated )
News
BleepingComputer

The RegisterShai-Hulud worm returns, belches secrets to 25K GitHub repos

First published (updated )
News
The Register

PostHog PostHogPostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

Risk 48
Severity
7.1
First published (updated )
CVE-2025-1522

PostHog PostHogPostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability

Risk 48
Severity
7.1
First published (updated )
CVE-2025-1521
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

PostHog PostHogPostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability

Risk 73
Severity
8
First published (updated )
CVE-2025-1520

PostHog PostHogPostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

Risk 50
Severity
7.1
First published (updated )
Advisory
ZDI-25-097

PostHog PostHogZDI-25-097: PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

Risk 48
Severity
7.1
First published (updated )
ZDI-CAN-25358

PostHog PostHogPostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability

Risk 50
Severity
7.1
First published (updated )
Advisory
ZDI-25-096

PostHog PostHogZDI-25-096: PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability

Risk 48
Severity
7.1
First published (updated )
ZDI-CAN-25352
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

PostHog PostHogPostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability

Risk 68
Severity
7.1
First published (updated )
Advisory
ZDI-25-099

PostHog PostHogZDI-25-099: PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability

Risk 66
Severity
7.1
First published (updated )
ZDI-CAN-25350

PostHog PostHogPostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

Risk 50
Severity
8.3
EPSS
0.09%
First published (updated )
CVE-2024-9710

PostHog PostHogPostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

Risk 49
Severity
7.1
First published (updated )
Advisory
ZDI-24-1383

PostHog PostHogZDI-24-1383: PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability

Risk 49
Severity
7.1
First published (updated )
ZDI-CAN-25351
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

PostHog PostHogServer-Side Request Forgery (SSRF) in Posthog - CVE-2023-46746

Risk 44
First published (updated )
Advisory
GHSL-2023-185

PostHog PostHogGHSL-2023-185: Server-Side Request Forgery (SSRF) in Posthog - CVE-2023-46746

Risk 35
Severity
4.8
First published (updated )
CVE-2023-46746

npm/posthog-jsCross-site scripting in PostHog-js

Risk 38
Severity
6.1
First published (updated )
CVE-2023-32325

PostHog PostHogOpen redirect vulnerability via endpoint authorize_and_redirect/?redirect= in posthog/posthog

Risk 38
Severity
6.1
First published (updated )
CVE-2022-0645

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203