Search for packages
| purl | pkg:pypi/octoprint@1.5.0rc1 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-qw93-h6pf-226x
Aliases: CVE-2025-32788 |
OctoPrint Authenticated Reverse Proxy Page Authentication Bypass ### Impact OctoPrint versions up until and including 1.10.3 contain a vulnerability that … |
Vulnerable |
|
GHSA-x7mf-wrh9-r76c
Aliases: CVE-2024-28237 |
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings ### Impact OctoPrint versions up until and including 1.9.3 … |
Vulnerable |
|
PYSEC-2022-282
Aliases: CVE-2022-2888 GHSA-937f-qh3w-6g87 |
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use … |
Vulnerable |
|
PYSEC-2022-283
Aliases: CVE-2022-3068 GHSA-2p75-q37p-f852 |
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3. |
Vulnerable |
|
PYSEC-2022-286
Aliases: CVE-2022-2872 GHSA-49wm-4fp6-h59c |
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3. |
Vulnerable |
|
PYSEC-2022-42975
Aliases: CVE-2022-3607 GHSA-rj5f-vm79-5j84 |
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3. |
Vulnerable |
|
PYSEC-2022-43142
Aliases: CVE-2022-2930 GHSA-39gf-864w-pxw4 |
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. |
Vulnerable |
|
PYSEC-2024-179
Aliases: CVE-2024-28237 GHSA-x7mf-wrh9-r76c |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability … |
Vulnerable |
|
PYSEC-2024-237
Aliases: CVE-2024-32977 GHSA-2vjq-hg5w-5gm7 |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability … |
Vulnerable |
|
PYSEC-2024-179
Aliases: CVE-2024-28237 GHSA-x7mf-wrh9-r76c |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability … |
Vulnerable |
|
PYSEC-2022-282
Aliases: CVE-2022-2888 GHSA-937f-qh3w-6g87 |
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use … |
Vulnerable |
|
PYSEC-2022-42975
Aliases: CVE-2022-3607 GHSA-rj5f-vm79-5j84 |
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3. |
Vulnerable |
|
PYSEC-2021-30
Aliases: CVE-2021-32561 GHSA-vcx4-fpmp-mvv6 |
OctoPrint before 1.6.0 allows XSS because API error messages include the values of input parameters. |
Vulnerable |
|
PYSEC-2024-29
Aliases: CVE-2024-23637 GHSA-5626-pw9c-hmjr |
OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows … |
Vulnerable |
|
PYSEC-2022-286
Aliases: CVE-2022-2872 GHSA-49wm-4fp6-h59c |
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3. |
Vulnerable |
|
PYSEC-2025-56
Aliases: CVE-2025-32788 GHSA-qw93-h6pf-226x |
OctoPrint provides a web interface for controlling consumer 3D printers. In versions up to and including 1.10.3, OctoPrint has a … |
Vulnerable |
|
PYSEC-2023-195
Aliases: CVE-2023-41047 GHSA-fwfg-vprh-97ph |
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows … |
Vulnerable |
|
PYSEC-2024-237
Aliases: CVE-2024-32977 GHSA-2vjq-hg5w-5gm7 |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability … |
Vulnerable |
|
PYSEC-2022-200
Aliases: CVE-2022-1430 GHSA-x7r7-wmj8-vv5g |
Cross-site Scripting (XSS) - DOM in GitHub repository octoprint/octoprint prior to 1.8.0. |
Vulnerable |
|
PYSEC-2024-202
Aliases: CVE-2024-51493 GHSA-cc6x-8cc7-9953 |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain a vulnerability … |
Vulnerable |
|
PYSEC-2024-201
Aliases: CVE-2024-49377 GHSA-xvxq-g8hw-fx4g |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain reflected XSS … |
Vulnerable |
|
PYSEC-2021-29
Aliases: CVE-2021-32560 GHSA-x9rq-fjp5-qgm9 |
The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not … |
Vulnerable |
|
PYSEC-2022-283
Aliases: CVE-2022-3068 GHSA-2p75-q37p-f852 |
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3. |
Vulnerable |
|
PYSEC-2022-43142
Aliases: CVE-2022-2930 GHSA-39gf-864w-pxw4 |
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3. |
Vulnerable |
|
PYSEC-2022-201
Aliases: CVE-2022-1432 GHSA-h8pc-j334-jjhm |
Cross-site Scripting (XSS) - Generic in GitHub repository octoprint/octoprint prior to 1.8.0. |
Vulnerable |
|
CVE-2024-28237
Aliases: GHSA-x7mf-wrh9-r76c |
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings OctoPrint versions up until and including 1.9.3 contain a … |
Vulnerable Vulnerable |
|
CVE-2022-2822
|
Improper Restriction of Excessive Authentication Attempts An attacker can freely brute force username and password and can takeover any account. … | There are no reported fixed by versions. |
|
PYSEC-2026-1712
Aliases: CVE-2025-58180 GHSA-49mj-x8jp-qvfc |
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload ### Impact OctoPrint versions up until and including … |
Vulnerable |
|
PYSEC-2026-1715
Aliases: CVE-2025-48067 GHSA-m9jh-jf9h-x3h2 |
OctoPrint vulnerable to possible file extraction via upload endpoints ### Impact OctoPrint versions up until and including 1.11.1 contain a … |
Vulnerable |
|
PYSEC-2026-1714
Aliases: CVE-2025-64187 GHSA-crvm-xjhm-9h29 |
OctoPrint vulnerable to XSS in Action Commands Notification and Prompt ### Impact OctoPrint versions up to and including 1.11.3 are … |
Vulnerable |
|
PYSEC-2026-1716
Aliases: CVE-2026-23892 GHSA-xg4x-w2j3-57h6 |
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication ### Impact OctoPrint versions up to and including 1.11.5 are affected … |
Vulnerable |
|
PYSEC-2026-2687
Aliases: CVE-2026-54134 GHSA-j4h9-pm27-4rfw |
OctoPrint has possible file exfiltration via query parameters on upload endpoints ### Impact OctoPrint versions up until and including 1.11.7 … |
Not vulnerable Not vulnerable |
|
PYSEC-2026-1713
Aliases: CVE-2025-48879 GHSA-9wj4-8h85-pgrw |
OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint ### Impact OctoPrint versions up until and including … |
Vulnerable |
|
PYSEC-2026-887
Aliases: CVE-2022-2822 GHSA-5w5x-q9p5-9qg3 |
OctoPrint does not have rate limiting on the login page OctoPrint 1.7.3 and prior does not have rate limiting on … | There are no reported fixed by versions. |
|
PYSEC-2026-2688
Aliases: CVE-2026-35163 GHSA-p6qx-ghxm-389h |
OctoPrint has XSS in its Suppressed Command Notifications ### Impact OctoPrint versions up to and including 1.11.7 as well as … |
Not vulnerable Not vulnerable |