All packages
GeekyBot vulnerabilities
4 known CVE vulnerabilities in GeekyBot, translated and rated.
- CVE-2026-57679Critical
GeekyBot versions up to 1.2.5 are vulnerable to unauthenticated SQL injection. An attacker can remotely execute arbitrary SQL queries without authentication.
- CVE-2026-40772Critical
GeekyBot versions up to 1.2.2 have a vulnerability allowing unauthenticated arbitrary file uploads.
- CVE-2026-39519Critical
GeekyBot versions up to 1.2.0 are vulnerable to unauthenticated SQL injection, which may lead to unauthorized access to the database.
- CVE-2026-61965High
The GeekyBot plugin versions up to 1.2.6 contain a Cross-Site Scripting (XSS) vulnerability that can be exploited without authentication.