| OctoPrint: Stored XSS via saved connection parametersCVE-2026-123364 · GHSA-P623-MXF7-QXJM |
octoprint |
PyPI |
Low
|
Fix reported |
|
| OctoPrint Unverified Password Change via Access Control SettingsCVE-2024-23637 · GHSA-5626-PW9C-HMJRVersion ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint has possible file exfiltration via query parameters on upload endpointsCVE-2026-54134 · GHSA-J4H9-PM27-4RFWVersion ranges need review. |
octoprint |
PyPI |
High
|
Fix reported |
|
| OctoPrint has XSS in its Suppressed Command NotificationsCVE-2026-35163 · GHSA-P6QX-GHXM-389HVersion ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint vulnerable to XSS in Action Commands Notification and PromptCVE-2025-64187 · GHSA-CRVM-XJHM-9H29Version ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrintCVE-2025-48879 · GHSA-9WJ4-8H85-PGRWVersion ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint has Timing Side-Channel Vulnerability in API Key AuthenticationCVE-2026-23892 · GHSA-XG4X-W2J3-57H6Version ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint vulnerable to possible file extraction via upload endpointsCVE-2025-48067 · GHSA-M9JH-JF9H-X3H2Version ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File UploadCVE-2025-58180 · GHSA-49MJ-X8JP-QVFCVersion ranges need review. |
octoprint |
PyPI |
High
|
Fix reported |
|
| OctoPrint does not have rate limiting on the login pageCVE-2022-2822 · GHSA-5W5X-Q9P5-9QG3Version ranges need review. |
octoprint |
PyPI |
Low
|
No fix reported |
|
| OctoPrint has an Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabledCVE-2024-32977 · GHSA-2VJQ-HG5W-5GM7Version ranges need review. |
octoprint |
PyPI |
High
|
Fix reported |
|
| XSS via the "Snapshot Test" feature in Classic Webcam plugin settingsCVE-2024-28237 · GHSA-X7MF-WRH9-R76CVersion ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint Incorrect Access ControlCVE-2021-32560 · GHSA-X9RQ-FJP5-QGM9Version ranges need review. |
octoprint |
PyPI |
High
|
Fix reported |
|
| OctoPrint API Error Messages vulnerable to XSSCVE-2021-32561 · GHSA-VCX4-FPMP-MVV6Version ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint vulnerable to Special Element InjectionCVE-2022-3607 · GHSA-RJ5F-VM79-5J84Version ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint vulnerable to Unrestricted Upload of File with Dangerous TypeCVE-2022-2872 · GHSA-49WM-4FP6-H59CVersion ranges need review. |
octoprint |
PyPI |
Low
|
Fix reported |
|
| OctoPrint vulnerable to Insufficient Session Expiration.CVE-2022-2888 · GHSA-937F-QH3W-6G87Version ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint Improper Privilege Management vulnerabilityCVE-2022-3068 · GHSA-2P75-Q37P-F852Version ranges need review. |
octoprint |
PyPI |
High
|
Fix reported |
|
| Unverified Password Change in OctoPrintCVE-2022-2930 · GHSA-39GF-864W-PXW4Version ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
| OctoPrint Authenticated Reverse Proxy Page Authentication BypassCVE-2025-32788 · GHSA-QW93-H6PF-226XVersion ranges need review. |
octoprint |
PyPI |
Medium
|
Fix reported |
|
