Chaskiq vulnerabilities
We track 3 vulnerabilities in Chaskiq products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 16, 2026.
Latest Chaskiq vulnerabilities
- 8.6 High severity
chaskiq: Server-Side Request Forgery
Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instance metadata endpoints,
- 8.6 High severity
Chaskiq: Missing Authentication for Critical Functionality
A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to manipulate any tenant Stripe subscription via the stripeCreateIntent GraphQL mutation. The mutation lacks authentication and authorization check
- 8.6 High severity
Chaskiq: Missing Authentication for Critical Functionality
A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the stripeCustomerPortal GraphQL mutation. The mutation performs no authentication or aut