These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-49213 is a high-severity vulnerability in TypeBot's shared SSRF validator. Prior to version 3.17.2, the validator can be bypassed using the IPv6 unspecified address ::. This allows a workspace editor or creator to configure a server-side HTTP Request block or guarded script fetch to make the Typebot server connect to local HTTP services through safeKy, potentially leading to unauthorized access o [truncated]
CVE-2026-48768 is a critical vulnerability in TypeBot, a chatbot builder tool. Versions 3.16.1 and earlier are affected. The vulnerability allows unauthenticated file uploads, enabling arbitrary content hosting and potential stored XSS. This issue has been fixed in version 3.17.0. Affected users should update to version 3.17.0 or later to mitigate this vulnerability.
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-06-18T00:16:23.363Z and has not been modified since then. TypeBot, a chatbot builder tool, had a SSRF validation bypass vulnerability in versions prior to 3.17.2. The issue was caused by a time-of-check to time-of-use gap in the SSRF guard, allowing for DNS rebinding attacks. This could lead to server- [truncated]
CVE-2026-48759 is a HIGH-severity vulnerability in TypeBot, a chatbot builder tool. Versions 3.15.2 and below are affected by an Insecure Direct Object Reference (IDOR) vulnerability. This vulnerability allows any authenticated user to modify or delete theme templates belonging to any other workspace. The issue arises from the handleSaveThemeTemplate and handleDeleteThemeTemplate handlers, which validate [truncated]
A critical stored XSS vulnerability exists in TypeBot versions 3.15.2 and prior. The app.typebot.io profile picture upload form fails to sanitize SVG/XML-based uploads, allowing embedded JavaScript execution. Attackers can upload malicious SVG files to persistently store and execute arbitrary JavaScript code, enabling session/token theft, account takeover, and sensitive user data exfiltration. This issue [truncated]
CVE-2026-39969 is a vulnerability in TypeBot versions 3.16.0 and prior. The WhatsApp Cloud API webhook endpoint does not verify the x-hub-signature-256 HMAC signature. This allows unauthenticated attackers to send spoofed webhook messages, consume API resources, and interact with external services using the workspace owner's credentials. The issue has been fixed in version 3.17.0. Affected users should up [truncated]
CVE-2026-39968 describes an incomplete authorization fix in TypeBot, a chatbot builder tool. The vulnerability affects versions 3.15.2 and prior, where a patch for GHSA-4xc5-wfwc-jw47 failed to fully secure credential access controls. While the builder's getCredentials tRPC endpoint received workspace membership checks, the bot-engine runtime's preview chat endpoint remained vulnerable. The bot-engine's g [truncated]
TypeBot is an open-source chatbot builder platform. CVE-2026-39967 identifies an authorization flaw in the bot engine's `findResult` query where result data retrieval is not properly scoped to the requesting `typebotId`. An authenticated attacker with knowledge of a valid foreign `resultId` can supply this identifier to the `startChat` endpoint and retrieve prior session data—including user answers, varia [truncated]
CVE-2026-39965 is a high-severity vulnerability in TypeBot, a chatbot builder tool. Versions 3.15.2 and prior are affected by an SSRF via Open Redirect Bypass, allowing an authenticated user to reach internal services. The issue has been fixed in version 3.16.0. This vulnerability can be exploited to extract cloud IAM credentials or probe internal APIs inaccessible from the internet. Affected operators, p [truncated]
The CVE record for CVE-2026-39964 was published on 2026-05-22T18:16:21.690Z and has not been modified since then. The NVD entry is currently Deferred. This cross-site scripting vulnerability in TypeBot chatbot builder versions prior to 3.16.0 allows an attacker to execute JavaScript code in the visitor's browser context when a link is clicked, which can result in the exfiltration of cookies and session to [truncated]
A high-severity SSRF vulnerability was found in TypeBot versions prior to 3.16.0. The vulnerability allows attackers to forge requests to loopback, cloud metadata, and private network targets due to inadequate SSRF protection in Webhook / HTTP Request blocks. The protection mechanism only validates URL strings, blocked hostname literals, and literal IP formats without resolving DNS, enabling SSRF attacks. [truncated]
CVE-2026-33712 is a critical Server-Side Request Forgery (SSRF) vulnerability in Typebot, a chatbot builder tool. Versions 3.15.2 and prior are affected. The vulnerability allows unauthenticated users to achieve SSRF by supplying a custom typebot definition with server-side code blocks. This issue has been fixed in version 3.16.0. Self-hosted Typebot deployments and hosted services are potentially impacte [truncated]
CVE-2026-28445 is a high-severity vulnerability in Typebot, a chatbot builder tool. Versions 3.15.2 and prior are affected. The RatingButton component in the embed package renders user-controlled customIcon.svg field directly via Solid's innerHTML directive without sanitization. This allows for arbitrary HTML/JS execution in the builder's authenticated context, enabling session hijacking and privilege esc [truncated]
CVE-2026-28444 is an IDOR vulnerability in Typebot versions 3.15.2 and prior. The getResultLogs API endpoint authorizes callers against the provided typebotId but fetches logs solely by resultId without verifying that the result belongs to the authorized typebot. This oversight allows an authenticated attacker to supply their own typebotId alongside any victim's resultId to read execution logs from other [truncated]
