Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

casdoor — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting casdoor. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security vulnerabilities associated with the vendor Casdoor, focusing on its open-source identity and access management platform. The collection encompasses a diverse range of reported flaws, including authentication bypasses, privilege escalation issues, and injection attacks, covering disclosures from the product's initial release through recent updates. Readers can utilize this resource to track the vendor’s advisory history, analyze specific weakness classes within the Casdoor ecosystem, and review the complete vulnerability timeline for this identity provider. By consolidating data from multiple sources, the page offers a centralized view of security incidents affecting Casdoor deployments. This allows security professionals and developers to assess the risk profile of their infrastructure, identify recurring patterns in reported bugs, and verify whether specific versions have been patched against known exploits. The aggregation supports both proactive security planning and reactive incident response by providing a clear historical context for each identified issue. Users can filter the data to focus on particular vulnerability types or time periods, facilitating a deeper understanding of how the product’s security posture has evolved over time. This structured overview helps organizations make informed decisions regarding version upgrades and mitigation strategies for their Casdoor instances, ensuring they remain aware of potential threats without needing to navigate disparate individual advisory pages.

Top products by casdoor: casdoor
CVE ID Title CVSS Severity Published
CVE-2026-91998 Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcp — casdoor CWE-863 9.9 Critical 2026-09-15
CVE-2026-90942 Casdoor through 4.4.0 Private Key Exposure via Certificate Endpoints — casdoor CWE-863 9.6 Critical 2026-09-14
CVE-2026-15630 CVE-2026-15630 — Casdoor - - 2026-07-23
CVE-2026-9098 CVE-2026-9098 — Casdoor - - 2026-05-28
CVE-2026-9097 CVE-2026-9097 — Casdoor - - 2026-05-28
CVE-2026-9096 CVE-2026-9096 — Casdoor - - 2026-05-28
CVE-2026-9095 CVE-2026-9095 — Casdoor - - 2026-05-28
CVE-2026-9094 CVE-2026-9094 — Casdoor - - 2026-05-28
CVE-2026-9093 CVE-2026-9093 — Casdoor - - 2026-05-28
CVE-2026-9092 CVE-2026-9092 — Casdoor - - 2026-05-28
CVE-2026-9091 CVE-2026-9091 — Casdoor - - 2026-05-28
CVE-2026-9090 CVE-2026-9090 — Casdoor - - 2026-05-28
CVE-2026-6815 CVE-2026-6815 — Casdoor - - 2026-05-11
CVE-2024-41658 GHSL-2024-036: Reflected XSS in QrCodePage.js — casdoor CWE-79 6.1 Medium 2024-08-20
CVE-2024-41657 GHSL-2024-035: Casdoor CORS misconfiguration — casdoor CWE-942 8.1 High 2024-08-20

This page lists every published CVE security advisory associated with casdoor. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.