CVE-2026-32230
1 advisory.
npm/uptime-kuma CVE-2026-32230: medium 5.3, EPSS 0.86%
Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page
Action: Upgrade uptime-kuma to 2.2.0 or later.
npm i uptime-kuma@2.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.2.0 | - |
Fixed versions
| 2.2.0 |
Sources
- osv: GHSA-c7hf-c5p5-5g6h
- https://github.com/louislam/uptime-kuma/security/advisories/GHSA-c7hf-c5p5-5g6h
- https://nvd.nist.gov/vuln/detail/CVE-2026-32230
- https://github.com/louislam/uptime-kuma/issues/7038
- https://github.com/louislam/uptime-kuma/issues/7135
- https://github.com/louislam/uptime-kuma/commit/303a609c05d0b174a5045c90f53c2b557d4febae
- https://github.com/louislam/uptime-kuma
- https://github.com/louislam/uptime-kuma/releases/tag/2.2.0
CVE-2026-32230 · published · modified · JSON