Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

louislam — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting louislam. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Louis Lam develops open-source backup solutions, primarily for Docker environments, with his Time Machine-inspired tool serving as a core use case for containerized data protection. Historically, vulnerabilities associated with this project include remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and insecure default configurations. The project has addressed multiple critical security issues, including authentication bypasses and path traversal vulnerabilities, with patches released promptly upon discovery. While no major public security incidents have been documented, the consistent discovery of new CVEs underscores the importance of regular updates and security hardening for production deployments.

Found 12 results / 13 Clear Filters
Top products by louislam: uptime-kuma dockge
CVE ID Title CVSS Severity Published
CVE-2026-71285 Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages — uptime-kuma CWE-79 8.1 High 2026-08-05
CVE-2026-33130 Uptime Kuma: SSTI in Notification Templates Allows Arbitrary File Read (Incomplete Fix for GHSA-vffh-c9pq-4crh) — uptime-kuma CWE-98 6.5 Medium 2026-03-20
CVE-2026-32230 Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page — uptime-kuma CWE-862 5.3 Medium 2026-03-12
CVE-2024-56331 Local File Inclusion (LFI) via Improper URL Handling in uptime-kuma's `Real-Browser` monitor — uptime-kuma CWE-22 6.8 Medium 2024-12-20
CVE-2023-49805 Uptime Kuma Missing Origin Validation in WebSockets — uptime-kuma CWE-1385 6.0 Medium 2023-12-11
CVE-2023-49804 Uptime Kuma Password Change Vulnerability — uptime-kuma CWE-384 6.7 Medium 2023-12-11
CVE-2023-49276 Attribute Injection leading to XSS(Cross-Site-Scripting) in uptime-kuma — uptime-kuma CWE-79 6.3 Medium 2023-12-01
CVE-2023-44400 Uptime Kuma has Persistentent User Sessions — uptime-kuma CWE-384 6.7 Medium 2023-10-09
CVE-2023-36822 Uptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data loss — uptime-kuma CWE-22 6.5 Medium 2023-07-05
CVE-2023-36821 Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation — uptime-kuma CWE-20 8.8 High 2023-07-05
CVE-2023-25811 Persistent Cross site scripting (XSS) in Uptime Kuma — uptime-kuma CWE-79 6.3 Medium 2023-02-21
CVE-2023-25810 Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma — uptime-kuma CWE-79 6.3 Medium 2023-02-21

This page lists every published CVE security advisory associated with louislam. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.