Homarr
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 21, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →DOM-Based XSS in Homarr /auth/login Redirect
Homarr has a Race Condition in Invite Token Registration (TOCTOU)
Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak)
Homarr: Unauthenticated SSRF in rssFeed.ts
Homarr affected by Unauthenticated SSRF / Port-Scan Primitive via widget.app.ping
Homarr: missing input sanitization and possible privilege escalation through ldap search query injection
Homarr is Vulnerable to Stored Cross-Site Scripting (XSS) and Possible Privilege Escalation via Malicious SVG Upload
Prettier eslint-config-prettier Embedded Malicious Code Vulnerability
Monitor Homarr in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.