Bugsink vulnerabilities
We track 4 vulnerabilities in Bugsink products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 10, 2026.
Latest Bugsink vulnerabilities
- 7.1 High severity
Bugsink is a self-hosted error tracking tool.
Bugsink is a self-hosted error tracking tool. In 2.1.0, an authenticated file write vulnerability was identified in Bugsink 2.1.0 in the artifact bundle assembly flow. A user with a valid authentication token could cause the application to write attacker-contr
- 7.5 High severity
bugsink: Allocation of Resources Without Limits or Throttling
Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.6, a specially crafted Brotli-compressed envelope can cause Bugsink to spend excessive CPU time in decompression, leading to denial of service. This can be done if the DSN is known, which i
- 7.5 High severity
bugsink: Allocation of Resources Without Limits or Throttling
Bugsink is a self-hosted error tracking tool. In versions prior to 2.0.5, brotli "bombs" (highly compressed brotli streams, such as many zeros) can be sent to the server. Since the server will attempt to decompress these streams before applying various maximum
- 7.2 High severity
bugsink: Improper Limitation of a Pathname to a Restricted Directory
Bugsink is a self-hosted error tracking service. In versions 1.4.2 and below, 1.5.0 through 1.5.4, 1.6.0 through 1.6.3, and 1.7.0 through 1.7.3, ingestion paths construct file locations directly from untrusted event_id input without validation. A specially cra