Login Request a demo
FR
Product
frigate
by blakeblackshear · last CVE Sep 22, 2026
14
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 1High 7Medium 6Low 0
Severity
All severities14Critical1High7Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add frigate to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-32874
6.8
1%
May 9
In Frigate, Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service
Affected: <= 0.13.2
CVE-2023-45670
6.8
0%
Oct 30
Frigate cross-site request forgery in `config_save` and `config_set` request handlers
Affected: < 0.13.0-beta3
CVE-2026-33469
6.5
0%
Mar 26
Authenticated Frigate users can read the full unredacted configuration via `/api/config/raw
Affected: = 0.17.0
CVE-2023-45671
4.7
1%
Oct 30
Frigate reflected XSS through `/<camera_name>` API endpoints
Affected: < 0.13.0-beta3
CVE-2026-33470
4.3
0%
Mar 26
Frigate has cross-camera snapshot disclosure via unrestricted timeline IDs and missing authorization in /api/events/{event_id}/snapshot-clean.webp
Affected: = 0.17.0
CVE-2026-33126
4.3
0%
Mar 20
Frigate has SSRF vulnerability in /ffprobe endpoint
Affected: < 0.16.3
Showing 6