Is Uptime Kuma 2.1.0 affected?

CVSS 7.5

3 known vulnerabilities affect 2.1.0 (highest CVSS 7.5).

16 newer releases in its track, up to 2.5.6. What changed up to 2.5.6

Vulnerabilities affecting 2.1.0

7.5
GHSA-wf2j-5mc7-5c4w Unauthenticated resource exhaustion DoS in ping badge endpoint via arbitrary monitor IDs
6.5
CVE-2026-33130 Another Server-side Template Injection (SSTI) in Notification Templates Allows Arbitrary File Read fixed in 2.2.1
5.3
CVE-2026-32230 Missing Authorization Check on Ping Badge Endpoint Leaks Ping times of montors without needing to be on a status page