groundhogg vulnerabilities
CVEs whose affected-version data names the groundhogg package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-104385High· 7.5Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.
Unauthenticated Sensitive Data Exposure in Groundhogg <= 4.8.3 versions.
▾ TwilightAdrian Tobey · groundhoggEPSS 0.30%via NVD
CVE-2026-104408High· 7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Groundhogg Groundhogg groundhogg allows Blind SQL Injection.This issue affects Groundhogg: from n/a through 4.8.3.
▾ TwilightGroundhogg · groundhoggEPSS 0.27%via NVD
CVE-2026-85310Medium· 6.5import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.
import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.
▾ SunlitAdrian Tobey · groundhoggEPSS 0.44%via NVD