GROWI, Inc. — Vulnerabilities & Security Advisories 12

GROWI, Inc. develops a collaborative team workspace platform focused on knowledge sharing and project management. Historically, the product has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting (XSS) flaws, and privilege escalation issues, as evidenced by seven recorded CVEs. While no major public security incidents have been documented, the consistent pattern of vulnerabilities in these categories suggests potential risks for organizations deploying the platform. The company has addressed these issues through security patches, but the recurrence of similar vulnerability types indicates ongoing challenges in secure coding practices for their web-based collaborative environment.