Login Request a demo
MO
Product
Monica
by Monicahq · last CVE Feb 20, 2026
20
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 1High 3Medium 16Low 0
Severity
All severities20Critical1High3Medium16Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Monica to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-54996
8.8
1%
Jan 10
MonicaHQ v4.1.2 was discovered to contain multiple authenticated Client-Side Injection vulnerabilities via the title and description parameters at /people/ID/reminders/create
Affected: 4.1.2
CVE-2023-1031
8.8
1%
May 8
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `settings` endpoint and first_name parameter
Affected: 4.0.0
CVE-2023-1094
8.8
1%
May 8
MonicaHQ version 4.0.0 allows an authenticated remote attacker to execute malicious code in the application via CSTI in the `people:id/food` endpoint and food parameter
Affected: 4.0.0
Showing 3