Is Uptime Kuma 2.2.1 affected?

Mar 10, 2026 · Release notes ↗

CVSS 7.5

1 known vulnerability affects 2.2.1 (highest CVSS 7.5).

11 newer releases in its track, up to 2.5.6. What changed up to 2.5.6

Vulnerabilities affecting 2.2.1

7.5
GHSA-wf2j-5mc7-5c4w Unauthenticated resource exhaustion DoS in ping badge endpoint via arbitrary monitor IDs

Newer releases

2.5.6	Oct 9, 2026	2.2.1 → 2.5.6
2.5.5	Sep 16, 2026	2.2.1 → 2.5.5
2.5.4	Sep 11, 2026	2.2.1 → 2.5.4
2.5.3	Aug 22, 2026	2.2.1 → 2.5.3
2.5.2	Aug 22, 2026	2.2.1 → 2.5.2
2.5.1	Aug 22, 2026	2.2.1 → 2.5.1
2.5.0	Aug 1, 2026	2.2.1 → 2.5.0
2.4.0	May 31, 2026	2.2.1 → 2.4.0
2.3.2	May 3, 2026	2.2.1 → 2.3.2
2.3.1	May 3, 2026	2.2.1 → 2.3.1
2.3.0	May 1, 2026	2.2.1 → 2.3.0