All 9 CVE vulnerabilities found in stoatchat, with AI-generated Chinese analysis, references, and POCs.
Vendor: stoatchat
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-74869 | stoatchat before 0.15.0 Missing Authorization via Subscribe CWE-862 | 7.7 | High | 2026-08-17 |
| CVE-2026-73059 | stoatchat before 0.15.0 Permission Bypass via message_fetch CWE-863 | 6.5 | Medium | 2026-08-16 |
| CVE-2026-73058 | stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass CWE-918 | 5.8 | Medium | 2026-08-16 |
| CVE-2026-73057 | stoatchat before 0.15.0 Uncapped SVG Rendering Denial of Service CWE-400 | 7.5 | High | 2026-08-16 |
| CVE-2026-63088 | stoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypass CWE-918 | 8.6 | High | 2026-07-16 |
| CVE-2024-58360 | stoatchat before 0.7.8 Unrestricted Account Creation CWE-1173 | 6.5 | Medium | 2026-07-16 |
| CVE-2026-63306 | stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints CWE-918 | 8.6 | High | 2026-07-16 |
| CVE-2025-71377 | stoatchat before 20250210-1 Unrestricted Message History Fetch CWE-1025 | - | - | 2026-07-16 |
| CVE-2025-71388 | stoatchat 20241213-1 Webhook Token Disclosure via Read Permissions CWE-639 | - | - | 2026-07-16 |
All 9 known CVE vulnerabilities affecting stoatchat with full Chinese analysis, references, and POCs where available.