[MEDIUM] Cachet has Stored XSS in Incident Component

PKSA-b73h-txx9-5t8m CVE-2026-113712 GHSA-x397-5hrv-j9m9

Affected version: <=2.4.1

Reported by:
GitHub

[CRITICAL] Cachet vulnerable to Authenticated Remote Code Execution

PKSA-ry37-gtsm-z2x1 CVE-2023-43661 GHSA-hv79-p62r-wg3p

Affected version: <2.4

Reported by:
GitHub

[HIGH] Unauthenticated SQL Injection in Cachet

PKSA-9qt8-cmky-vj2y CVE-2021-39165 GHSA-79mg-4w23-4fqc

Affected version: <=2.3.18

Reported by:
GitHub

[HIGH] Cachet configuration leak

PKSA-wqcd-c1yd-y32h CVE-2021-39174 GHSA-88f9-7xxh-c688

Affected version: <=2.5.0

Reported by:
GitHub

[HIGH] Cachet vulnerable to forced reinstall

PKSA-qkqp-m22r-mqy1 CVE-2021-39173 GHSA-r67m-m8c7-jp83

Affected version: <2.5.1

Reported by:
GitHub

[HIGH] Cachet vulnerable to new line injection during configuration edition

PKSA-z7h4-pyhr-63t6 CVE-2021-39172 GHSA-9jxw-cfrh-jxq6

Affected version: <2.5.1

Reported by:
GitHub