Part-DB vulnerabilities
We track 2 vulnerabilities in Part-DB products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 23, 2026.
2vulnerabilities
1critical
1high
0exploited
9.1average CVSS score
Latest Part-DB vulnerabilities
- 8.7 High severity
Part-DB-server: Weak Password Recovery Mechanism for Forgotten Password
Part-DB is an open source inventory management system for electronic components. Prior to version 2.13.3, Part-DB builds the absolute URL of the password-reset link it emails to a user from the client-supplied HTTP Host header, with no trusted-host validation.
- 9.6 Critical severity
Part-DB-server: Unrestricted Upload of File with Dangerous Type
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extension, and its extension