Login Request a demo
GR
Product
GROWI
by GROWI, Inc. · last CVE Oct 28, 2026
15
CVEs
0
On KEV
8.3
Max CVSS
4
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 0High 4Medium 11Low 0
Severity
All severities15Critical0High4Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GROWI to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-53620
6.3
0%
Aug 31
GROWI contains a vulnerability with an authorization bypass through user-controlled key in the bookmark folder APIs
Affected: through v8.0.0
CVE-2025-54806
6.1
0%
Oct 23
GROWI v4.2.7 and earlier contains a cross-site scripting vulnerability in the page alert function
Affected: v4.2.7 and earlier
CVE-2026-26291
5.4
0%
Apr 15
Stored cross-site scripting vulnerability exists in GROWI v7.4.6 and earlier
Affected: v7.4.6 and earlier
CVE-2025-61994
5.4
0%
Nov 6
Cross-site scripting vulnerability exists in GROWI prior to v7.2.10
Affected: prior to v7.2.10
CVE-2026-115624
New
5.3
0%
Oct 28
GROWI contains a missing authorization check vulnerability in its collaborative editing feature
Affected: v7.0.0 through v8.0.6
CVE-2026-100727
5.3
0%
Oct 5
An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file…
Affected: before v7.5.5
CVE-2026-68951
5.3
0%
Aug 31
GROWI contains an incorrect authorization vulnerability
Affected: through v8.0.0
CVE-2025-64700
4.3
0%
Dec 17
Cross-site request forgery vulnerability exists in GROWI v7.3.3 and earlier
Affected: v7.3.3 and earlier
CVE-2025-43880
4.3
0%
Jun 25
Inefficient regular expression complexity issue exists in GROWI prior to v7.1.6
Affected: prior to v7.1.6
CVE-2026-109848
New
4.2
0%
Oct 28
GROWI contains an authorization bypass vulnerability in its tag update API and the page update API due to improper use of a user-controlled key
Affected: v4.5.5 through v8.0.6
CVE-2026-105272
New
4.2
0%
Oct 28
GROWI contains an authorization bypass vulnerability in its page viewing and commenting functionality due to improper use of a user-controlled key
Affected: v3.2.10 through v8.0.6
Showing 11