Login Request a demo
AP
Product
appsmith
by appsmithorg · last CVE Jun 24, 2026
19
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 5High 5Medium 8Low 1
Severity
All severities19Critical5High5Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add appsmith to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-39824
8.9
1%
Sep 5
Server-side JavaScript injection in Appsmith through 1.7.14 allows remote attackers to execute arbitrary JavaScript code from the server via the currentItem property of the list…
Affected: through 1.7.14
CVE-2026-22794
8.8
0%
Jan 12
Account Takeover Vulnerability in Appsmith
Affected: before 1.93
CVE-2022-38298
8.8
1%
Sep 12
Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata…
Affected: 1.7.11
CVE-2026-5418
7.3
0%
Apr 2
appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery
Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +34 more
CVE-2026-50189
7.2
0%
Jun 24
Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route
Affected: before 2.1
Showing 5