cachet vulnerabilities
CVEs whose affected-version data names the cachet package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-113712Medium· 4.8PoCCachet has Stored XSS in Incident Component
Cachet is an open-source status page system. Versions 2.4.1 and earlier have a stored Cross-Site Scripting (XSS) vulnerability in the incident creation form, allowing an authenticated attacker to inject malicious HTML/JavaScript that exe…
▾ Twilightcachethq · cachetEPSS 0.46%via CVEORG
CVE-2023-43661Critical· 9.1PoCCachet vulnerable to Authenticated Remote Code Execution
Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtration and old twig version. Commit 6f…
▾ Abyssalcachethq · cachetEPSS 52%via CVEORG