Advisories · Technology

PostHog.

Every CVE that names PostHog among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-1522 CVE record

CVSS 7.1 High

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability
- PostHog
- Server-side request forgery (SSRF)
Not analysed yet 23 Apr 2025
CVE-2025-1521 CVE record

CVSS 7.1 High

PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability
- PostHog
- Server-side request forgery (SSRF)
Not analysed yet 23 Apr 2025
CVE-2024-9710 CVE record

CVSS 7.1 High

PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability
- PostHog
- Server-side request forgery (SSRF)
Not analysed yet 22 Nov 2024
CVE-2023-46746 CVE record

CVSS 4.8 Medium

Authenticated PostHog users vulnerable to SSRF
- posthog
- Server-side request forgery (SSRF)
Not analysed yet 1 Dec 2023