Products: 1
Vulnerabilities: 28
Known Exploited: 0
2
Critical Level Threats
4
High Level Threats
21
Medium Level Threats
1
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-71250
Firefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypassable via DNS Rebinding
Last Modified: Aug 10, 2026
Published: Aug 05, 2026
CVE-2024-37893
MFA bypass in oauth flow in Firefly III
Last Modified: Apr 15, 2026
Published: Jun 17, 2024
CVE-2024-22075
Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection.
Last Modified: Jun 05, 2025
Published: Jan 05, 2024
CVE-2023-1788
Insufficient Session Expiration in firefly-iii/firefly-iii
Last Modified: Feb 10, 2025
Published: Apr 05, 2023
CVE-2023-1789
Improper Input Validation in firefly-iii/firefly-iii
Last Modified: Feb 11, 2025
Published: Apr 01, 2023
Items Per Page
