S
Vendor security profile
stoatchat
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs11
Critical1
CISA KEV0
Public exploit8
Patch rate%0
Avg. CVSS7.6
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
4
6
0
CVE KEV
CVE severity distribution
11toplam CVE
Critical1 (9%)
High7 (64%)
Medium3 (27%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%73
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
11Unknown
Latest vulnerabilities
7.1
CVE-2026-100679
stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
S
Patch status unknownEPSS %0
8.3
CVE-2026-100678
stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting
S
Patch status unknownEPSS %0
6.9
CVE-2026-100677
stoatchat before 0.15.5 Account Enumeration via Error Location
S
Patch status unknownEPSS %0
8.8
CVE-2026-100676
stoatchat before 0.15.5 Local Filesystem Read via SVG
S
Patch status unknownEPSS %0
7.1
CVE-2026-100675
stoatchat before 0.15.5 Denial of Service via mass mentions
S
Patch status unknownEPSS %0
5.3
CVE-2026-100674
stoatchat before 0.15.5 Username Validation Bypass via Unicode Sanitization
S
Patch status unknownEPSS %0
8.3
CVE-2026-74869
stoatchat before 0.15.0 Missing Authorization via Subscribe
S
Patch status unknownEPSS %0
7.1
CVE-2026-73059
stoatchat before 0.15.0 Permission Bypass via message_fetch
S
Patch status unknownEPSS %0
6.9
CVE-2026-73058
stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass
S
Patch status unknownEPSS %0
8.7
CVE-2026-73057
stoatchat before 0.15.0 Uncapped SVG Rendering Denial of Service
S
Patch status unknownEPSS %0