CVE-2026-42556

概要

参考情報

• gitroomhq/postiz-app release v2.21.7 · Product
• gitroomhq/postiz-app security advisory · Vendor Advisory

postiz のその他の脆弱性

• CVE-2026-42298緊急 9.8Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability in the Build and Publish PR Docker Imag…
• CVE-2026-40487緊急 9.0Postiz is an AI social media scheduling tool. Prior to version 2.21.6, a file upload validation bypass allows any authenticated user to uplo…
• CVE-2026-40168高 8.2Postiz is an AI social media scheduling tool. Prior to 2.21.5, the /api/public/stream endpoint is vulnerable to SSRF. Although the applicati…
• CVE-2026-34590中 5.4Postiz is an AI social media scheduling tool. Prior to version 2.21.4, the POST /webhooks/ endpoint for creating webhooks uses WebhooksDto w…
• CVE-2026-34577高 8.6Postiz is an AI social media scheduling tool. Prior to version 2.21.3, the GET /public/stream endpoint in PublicController accepts a user-su…