Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Please see our official support policy.

Reporting a Vulnerability

Please see our guidelines for responsibly disclosing security vulnerabilities.

Ineffective Rate Limit Allows Account Enumeration And Password Reset Email Flooding
GHSA-cfc7-4828-mhc9 published Aug 13, 2026 by roryaronson
Moderate
Missing Publication Check Allows Disclosure Of Unshared User Content
GHSA-mhm2-4x5w-grpq published Aug 13, 2026 by roryaronson
Moderate
Unauthenticated File Upload Allows Stored Cross-Site Scripting And Account Takeover
GHSA-pr56-2xcx-gfv5 published Aug 13, 2026 by roryaronson
High
Missing Ownership Check Allows Cross-Account Record Disclosure, Modification And Deletion
GHSA-pg3f-67x6-jmm5 published Aug 13, 2026 by roryaronson
Moderate
SQL injection vulnerability in Farmbot-Web-App
GHSA-pgq5-ff74-g7xq published Oct 12, 2023 by roryaronson
High

Learn more about advisories related to FarmBot/Farmbot-Web-App in the GitHub Advisory Database