Known vulnerabilities in Habitica

Vendor: HabitRPG
Software: Habitica
Software CPE: cpe:2.3:a:habitrpg:habitica:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Habitica Habitica is affected by 3 known vulnerabilities: 1 medium, 2 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU128137 - Reusing a Nonce, Key Pair in Encryption
CWE-323 Low
No
No
5.46.3 27.04.2026 SB2026042797
#VU64747 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23077
CWE-79 Low
No
No
4.233.0 28.06.2022 SB2022062717
#VU64701 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-23078
CWE-601 Medium
No
No
4.233.0 27.06.2022 SB2022062717