Casdoor
10 CVEs tracked since 2026. Since May 2026, none of them reached CISA KEV.
Casdoor CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-05 | 10 | 0 |
Products
The products that kept showing up in Casdoor's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Casdoor.
- CVE-2026-91998Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcp9.9
- CVE-2026-90942Casdoor through 4.4.0 Private Key Exposure via Certificate Endpoints9.6
- CVE-2026-15630CVE-2026-156309.9
- CVE-2026-9098CVE-2026-90989.1
- CVE-2026-9097CVE-2026-90979.8
- CVE-2026-9096CVE-2026-90967.5
- CVE-2026-9095CVE-2026-90958.1
- CVE-2026-9094CVE-2026-90949.8
- CVE-2026-9093CVE-2026-90939.8
- CVE-2026-9092CVE-2026-90929.1
- CVE-2026-9091CVE-2026-90915.3
- CVE-2026-9090CVE-2026-90909.1
- CVE-2026-6815CVE-2026-68155.9
- CVE-2024-41658GHSL-2024-036: Reflected XSS in QrCodePage.js6.1
- CVE-2024-41657GHSL-2024-035: Casdoor CORS misconfiguration8.1
The record
- Peak rank
- #121 in May 2026
- Busiest month shown
- May 2026, 10 CVEs
- Months with a KEV entry
- 0 since May 2026
- Monthly snapshots
- 1 since 2026