Rommapp vulnerabilities
We track 3 vulnerabilities in Rommapp products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 3, 2025.
Latest Rommapp vulnerabilities
- 7.6 High severity
romm: Improper Neutralization of Input During Web Page Generation
RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface. RomM contains multiple unrestricted file upload vulnerabilities that allow authenticated users to upload malicious SVG or HTML files.
- 9.4 Critical severity
romm: Unrestricted Upload of File with Dangerous Type
RomM (ROM Manager) allows users to scan, enrich, browse and play their game collections with a clean and responsive interface. In versions 4.0.0-beta.3 and below, an authenticated arbitrary file write vulnerability exists in the /api/saves endpoint. This can l
- 8.3 High severity
romm: Path Traversal: '/dir/../filename'
RomM is a self-hosted rom manager and player. Versions prior to 3.10.3 and 4.0.0-beta.3 have an authenticated path traversal vulnerability in the `/api/raw` endpoint. Anyone running the latest version of RomM and has multiple users, even unprivileged users, su