Linkwarden vulnerabilities
We track 3 vulnerabilities in Linkwarden products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 9, 2026.
Latest Linkwarden vulnerabilities
- 9.1 Critical severity
linkwarden: Server-Side Request Forgery
Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. Prior to version 2.13.0, a Server-Side Request Forgery (SSRF) vulnerability in the fetchTitleAndHeaders function allows authenticated users to ma
- 8.8 High severity
linkwarden: Improper Neutralization of Input During Web Page Generation
Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In versions 2.14.0 and prior, the archive upload endpoint (POST /api/v1/archives/[linkId]?format=4) accepts HTML files (text/html) without saniti
- 8.7 High severity
linkwarden: External Control of File Name or Path
Linkwarden is a self-hosted, open-source collaborative bookmark manager to collect, organize and archive webpages. In version 2.10.2, the server accepts links of format file:///etc/passwd and doesn't do any validation before sending them to parsers and playwri