marcantondahmen/automad Security Advisories | GitStock

high2026-05-27

Automad has Broken Access Control: Unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint

GHSA-xm76-r88j-vm3g · CVE-2026-45332

high2024-07-19

Automad arbitrary file upload vulnerability

GHSA-47mc-qmh2-mqj4 · CVE-2024-40400

low2023-12-21

Authenticated Blind SSRF in automad/automad

GHSA-q5q3-qm26-9jwm · CVE-2023-7037

medium2023-12-21

Cross-Site Request Forgery (CSRF) in automad/automad

GHSA-4j8w-p6hv-3qxc · CVE-2023-7038