OctoPrint vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-54134HighOctoPrint: OctoPrint has possible file exfiltration via query parameters on upload endpoints CVE-2026-35163MediumOctoPrint: OctoPrint has XSS in its Suppressed Command Notifications CVE-2026-23892MediumOctoPrint: OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication CVE-2025-64187Mediumoctoprint: OctoPrint vulnerable to XSS in Action Commands Notification and Prompt CVE-2025-58180Highoctoprint: OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload CVE-2025-48879MediumOctoPrint: OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint CVE-2025-48067MediumOctoPrint: OctoPrint vulnerable to possible file extraction via upload endpoints CVE-2025-32788Mediumoctoprint: OctoPrint Authenticated Reverse Proxy Page Authentication Bypass CVE-2024-51493MediumOctoPrint: OctoPrint has API key access in settings without reauthentication CVE-2024-49377MediumOctoPrint: OctoPrint Vulnerable to Reflected XSS in Jinja2 Templates CVE-2024-32977HighOctoPrint: OctoPrint has an Authentication Bypass via X-Forwarded-For Header when autologinLocal is enabled CVE-2024-28237MediumOctoPrint: XSS via the "Snapshot Test" feature in Classic Webcam plugin settings CVE-2024-23637MediumOctoPrint: OctoPrint Unverified Password Change via Access Control Settings CVE-2023-41047HighOctoPrint: OctoPrint vulnerable to Improper Neutralization of Special Elements Used in a Template Engine CVE-2022-3607MediumOctoPrint: OctoPrint vulnerable to Special Element Injection CVE-2022-2872LowOctoPrint: OctoPrint vulnerable to Unrestricted Upload of File with Dangerous Type CVE-2022-2888MediumOctoPrint: OctoPrint vulnerable to Insufficient Session Expiration.CVE-2022-3068HighOctoPrint: OctoPrint Improper Privilege Management vulnerability CVE-2022-2930MediumOctoPrint: Unverified Password Change in OctoPrint CVE-2022-2822LowOctoPrint: OctoPrint does not have rate limiting on the login page CVE-2021-32561MediumOctoPrint: OctoPrint API Error Messages vulnerable to XSS CVE-2021-32560Highoctoprint: OctoPrint Incorrect Access Control CVE-2022-1430HighOctoPrint: Cross-site Scripting in OctoPrint CVE-2022-1432HighOctoPrint: Cross-site Scripting in OctoPrint

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo