CyberSecBulletin

Monetr vulnerabilities

We track 2 vulnerabilities in Monetr products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 7, 2026.

2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score

Latest Monetr vulnerabilities

  • 7.1 High severity

    monetr: Server-Side Request Forgery

    CVE-2026-41644Monetr

    monetr is a budgeting application for recurring expenses. Prior to version 1.12.5, a server-side request forgery (SSRF) vulnerability in monetr's Lunch Flow integration allowed any authenticated user on a self-hosted instance to cause the monetr server to issu

  • 7.5 High severity

    monetr: Uncontrolled Resource Consumption

    CVE-2026-40481Monetr

    monetr is a budgeting application for recurring expenses. In versions 1.12.3 and below, the public Stripe webhook endpoint buffers the entire request body into memory before validating the Stripe signature. A remote unauthenticated attacker can send oversized