Search for packages
| purl | pkg:pypi/octoprint@1.9.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-qw93-h6pf-226x
Aliases: CVE-2025-32788 |
OctoPrint Authenticated Reverse Proxy Page Authentication Bypass ### Impact OctoPrint versions up until and including 1.10.3 contain a vulnerability that … |
Vulnerable |
|
GHSA-x7mf-wrh9-r76c
Aliases: CVE-2024-28237 |
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings ### Impact OctoPrint versions up until and including 1.9.3 … |
Vulnerable |
|
PYSEC-2024-179
Aliases: CVE-2024-28237 GHSA-x7mf-wrh9-r76c |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability … |
Vulnerable |
|
PYSEC-2024-237
Aliases: CVE-2024-32977 GHSA-2vjq-hg5w-5gm7 |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability … |
Vulnerable |
|
PYSEC-2024-179
Aliases: CVE-2024-28237 GHSA-x7mf-wrh9-r76c |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability … |
Vulnerable |
|
PYSEC-2024-29
Aliases: CVE-2024-23637 GHSA-5626-pw9c-hmjr |
OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows … |
Vulnerable |
|
PYSEC-2025-56
Aliases: CVE-2025-32788 GHSA-qw93-h6pf-226x |
OctoPrint provides a web interface for controlling consumer 3D printers. In versions up to and including 1.10.3, OctoPrint has a … |
Vulnerable |
|
PYSEC-2023-195
Aliases: CVE-2023-41047 GHSA-fwfg-vprh-97ph |
OctoPrint is a web interface for 3D printers. OctoPrint versions up until and including 1.9.2 contain a vulnerability that allows … |
Vulnerable |
|
PYSEC-2024-237
Aliases: CVE-2024-32977 GHSA-2vjq-hg5w-5gm7 |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability … |
Vulnerable |
|
PYSEC-2024-202
Aliases: CVE-2024-51493 GHSA-cc6x-8cc7-9953 |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain a vulnerability … |
Vulnerable |
|
PYSEC-2024-201
Aliases: CVE-2024-49377 GHSA-xvxq-g8hw-fx4g |
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain reflected XSS … |
Vulnerable |
|
CVE-2024-28237
Aliases: GHSA-x7mf-wrh9-r76c |
XSS via the "Snapshot Test" feature in Classic Webcam plugin settings OctoPrint versions up until and including 1.9.3 contain a … |
Vulnerable Vulnerable |
|
PYSEC-2026-1712
Aliases: CVE-2025-58180 GHSA-49mj-x8jp-qvfc |
OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload ### Impact OctoPrint versions up until and including … |
Vulnerable |
|
PYSEC-2026-1715
Aliases: CVE-2025-48067 GHSA-m9jh-jf9h-x3h2 |
OctoPrint vulnerable to possible file extraction via upload endpoints ### Impact OctoPrint versions up until and including 1.11.1 contain a … |
Vulnerable |
|
PYSEC-2026-1714
Aliases: CVE-2025-64187 GHSA-crvm-xjhm-9h29 |
OctoPrint vulnerable to XSS in Action Commands Notification and Prompt ### Impact OctoPrint versions up to and including 1.11.3 are … |
Vulnerable |
|
PYSEC-2026-1716
Aliases: CVE-2026-23892 GHSA-xg4x-w2j3-57h6 |
OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication ### Impact OctoPrint versions up to and including 1.11.5 are affected … |
Vulnerable |
|
PYSEC-2026-2687
Aliases: CVE-2026-54134 GHSA-j4h9-pm27-4rfw |
OctoPrint has possible file exfiltration via query parameters on upload endpoints ### Impact OctoPrint versions up until and including 1.11.7 … |
Not vulnerable Not vulnerable |
|
PYSEC-2026-1713
Aliases: CVE-2025-48879 GHSA-9wj4-8h85-pgrw |
OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint ### Impact OctoPrint versions up until and including … |
Vulnerable |
|
PYSEC-2026-2688
Aliases: CVE-2026-35163 GHSA-p6qx-ghxm-389h |
OctoPrint has XSS in its Suppressed Command Notifications ### Impact OctoPrint versions up to and including 1.11.7 as well as … |
Not vulnerable Not vulnerable |