Security: appsmithorg/appsmith
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Account Takeover Vulnerability in AppsmithGHSA-7hf5-mc28-xmcv published
Jan 12, 2026 by vivek-appsmithCritical -
Server-Side Request Forgery (SSRF) in Appsmith via WebClientUtils improper host validationGHSA-9m89-5jw7-q5cr published
Mar 23, 2026 by subrata71High -
Broken Access Control Allows Viewer Role User to Query DatasourcesGHSA-794x-gm8v-2wj6 published
Mar 25, 2025 by mohanarpitModerate -
Appsmith server, can be fooled into restarting itself over and over, leading to denial of serviceGHSA-6mc8-hw5c-7qqr published
Mar 25, 2025 by mohanarpitModerate -
Misconfigured Local DB Leads to Local System Command ExecutionGHSA-m95x-4w54-gc83 published
Mar 25, 2025 by mohanarpitModerate