Vulnerabilities in stoatchat
16 resultsCVE-2025-71377HIGHstoatchat before 20250210-1 Unrestricted Message History FetchEPSS 0.7%CVE-2026-100676HIGHstoatchat before 0.15.5 Local Filesystem Read via SVGEPSS 0.5%CVE-2025-71388HIGHstoatchat 20241213-1 Webhook Token Disclosure via Read PermissionsEPSS 0.5%CVE-2026-63088HIGHstoatchat < 0.14.0 SSRF via DNS-based IP Blocklist BypassEPSS 0.5%CVE-2024-58360MEDIUMstoatchat before 0.7.8 Unrestricted Account CreationEPSS 0.4%CVE-2026-100679HIGHstoatchat before 0.15.5 MFA Bypass via Cross-Account TicketEPSS 0.4%CVE-2026-73059HIGHstoatchat before 0.15.0 Permission Bypass via message_fetchEPSS 0.4%CVE-2026-100675HIGHstoatchat before 0.15.5 Denial of Service via mass mentionsEPSS 0.4%CVE-2026-73058MEDIUMstoatchat before 0.15.0 SSRF via IPv6 unspecified address bypassEPSS 0.4%CVE-2026-74869HIGHstoatchat before 0.15.0 Missing Authorization via SubscribeEPSS 0.4%CVE-2026-100677MEDIUMstoatchat before 0.15.5 Account Enumeration via Error LocationEPSS 0.3%CVE-2026-73057HIGHstoatchat before 0.15.0 Uncapped SVG Rendering Denial of ServiceEPSS 0.3%CVE-2026-63306CRITICALstoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpointsEPSS 0.3%CVE-2026-100678HIGHstoatchat before 0.15.5 MFA Brute Force via Insufficient Rate LimitingEPSS 0.3%CVE-2026-100674MEDIUMstoatchat before 0.15.5 Username Validation Bypass via Unicode SanitizationEPSS 0.2%CVE-2026-57848MEDIUMStoat for Android Internal File Disclosure via Exported ShareTargetActivity URI ValidationEPSS 0.2%