graphite-web vulnerabilities
CVEs whose affected-version data names the graphite-web package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2022-4729Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
▾ Sunlitgraphite-web · graphite-webEPSS 0.74%via OSV
CVE-2022-4730Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
▾ Sunlitgraphite-web · graphite-webEPSS 0.77%via OSV
CVE-2022-4728Medium· 5.4Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
▾ Sunlitgraphite-web · graphite-webEPSS 0.77%via OSV
CVE-2017-18638High· 7.5PoCgraphite.composer.views.send_email vulnerable to SSRF
graphite.composer.views.send_email vulnerable to SSRF
▾ Midnightgraphite-web · graphite-webEPSS 15%via OSV