{"action":"Upgrade uptime-kuma to 2.2.0 or later.","affected":[{"fixed":"2.2.0","introduced":"2.0.0"}],"component":"uptime-kuma","cve_ids":["CVE-2026-32230"],"ecosystem":"npm","epss":0.00925,"exploited":false,"fixed_versions":["2.2.0"],"ghsa_id":"GHSA-c7hf-c5p5-5g6h","id":"tcs_01M5KFJ26M48QCXEN5Y1XDTH4D","modified_at":"2026-03-14T01:56:21.433472Z","published_at":"2026-03-12T14:47:39Z","references":["https://osv.dev/vulnerability/GHSA-c7hf-c5p5-5g6h","https://github.com/louislam/uptime-kuma/security/advisories/GHSA-c7hf-c5p5-5g6h","https://nvd.nist.gov/vuln/detail/CVE-2026-32230","https://github.com/louislam/uptime-kuma/issues/7038","https://github.com/louislam/uptime-kuma/issues/7135","https://github.com/louislam/uptime-kuma/commit/303a609c05d0b174a5045c90f53c2b557d4febae","https://github.com/louislam/uptime-kuma","https://github.com/louislam/uptime-kuma/releases/tag/2.2.0"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-c7hf-c5p5-5g6h","url":"https://osv.dev/vulnerability/GHSA-c7hf-c5p5-5g6h"}],"summary":"Uptime Kuma is Missing Authorization Checks on Ping Badge Endpoint, Leaks Ping times of monitors without needing to be on a status page"}