Appwrite

    Dashboard / Vendors

    Products: 3
    Vulnerabilities: 9
    Known Exploited: 0
    0
    Critical Level Threats
    4
    High Level Threats
    5
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-108770

    Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery

    Last Modified: Oct 13, 2026
    Published: Oct 11, 2026

    CVE-2026-89036

    Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter

    Last Modified: Oct 01, 2026
    Published: Sep 17, 2026

    CVE-2026-72861

    Appwrite Templates github-issue-bot Skips Webhook Signature Verification When the X-Hub-Signature-256 Header Is Absent

    Last Modified: Sep 24, 2026
    Published: Aug 20, 2026

    CVE-2022-25377

    The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ directory traversal. In order to be vulnerable, APP_STORAGE_CERTIFICATES/.well-known/acme-challenge must exist on disk. (This pathname is automatically created if the user chooses to install Let's Encrypt certificates via Appwrite.)

    Last Modified: Apr 03, 2025
    Published: Feb 22, 2024

    CVE-2024-1063

    Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

    Last Modified: May 29, 2025
    Published: Jan 30, 2024
    Items Per Page