HortusFox

Trends

1
HortusFox patches SQL injection flaw in versions before 6.2●🚨 EUVD-2026-95791 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: hortusfox-web 🏢 Vendor: danielbrendel 📅 Updated: 2026-10-09 📝 HMmastodon Technology Cybersecurity013 h ago
A medium-severity SQL injection vulnerability, tracked as EUVD-2026-95791 with a CVSS score of 7.1, has been disclosed in HortusFox (hortusfox-web), the self-hosted plant management application by developer danielbrendel. Versions before 6.2 allow API token holders to inject SQL through a crafted include_info parameter. Users are advised to update to 6.2 or later.
2
HortusFox vulnerability allows authenticated file upload attacks●🚨 EUVD-2026-95792 📊 Score: 7.7/10 (CVSS v3.1) 📦 Product: hortusfox-web 🏢 Vendor: danielbrendel 📅 Updated: 2026-10-09 📝 HMmastodon Technology Cybersecurity013 h ago
A medium-to-high severity vulnerability, tracked as EUVD-2026-95792 with a CVSS score of 7.7, has been disclosed in HortusFox (hortusfox-web), a self-hosted plant management application by developer danielbrendel. Versions through 6.3 contain an unrestricted file upload flaw in the PlantAttachmentModel, letting authenticated users store arbitrary files on the server. Admins running the app are advised to check for updates and restrict uploads.