Products: 1
Vulnerabilities: 4
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
3
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-113612
SparkyFitness before 0.17.0 Missing Authorization via food-variants DELETE Endpoint
Last Modified: Oct 20, 2026
Published: Oct 20, 2026
CVE-2026-102923
SparkyFitness: SSRF via unvalidated custom_url in AI service settings
Last Modified: Oct 28, 2026
Published: Oct 16, 2026
CVE-2026-92263
SparkyFitness: Authenticated OS command injection (host RCE) via backup-restore filename in POST /api/admin/backup/restore
Last Modified: Oct 21, 2026
Published: Oct 16, 2026
CVE-2025-65368
SparkyFitness v0.15.8.2 is vulnerable to Cross Site Scripting (XSS) via user input and LLM output.
Last Modified: Jan 22, 2026
Published: Jan 15, 2026
Items Per Page
