<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: posthog</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-1522: PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-1522.html</link><guid>https://patchthecve.com/cve/CVE-2025-1522.html</guid><pubDate>Wed, 17 Jun 2026 08:39:18 +0000</pubDate><description>MEDIUM 6.5: PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability.

The specific flaw exists within the </description></item><item><title>CVE-2025-1521: PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-1521.html</link><guid>https://patchthecve.com/cve/CVE-2025-1521.html</guid><pubDate>Wed, 17 Jun 2026 08:39:17 +0000</pubDate><description>MEDIUM 6.5: PostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability.

The specific flaw exists with</description></item><item><title>CVE-2025-1520: PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability</title><link>https://patchthecve.com/cve/CVE-2025-1520.html</link><guid>https://patchthecve.com/cve/CVE-2025-1520.html</guid><pubDate>Wed, 17 Jun 2026 08:39:17 +0000</pubDate><description>HIGH 8.0: PostHog ClickHouse Table Functions SQL Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of PostHog. Authentication is required to exploit this vulnerability.

The specific flaw exists within the im</description></item><item><title>CVE-2024-9710: PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability</title><link>https://patchthecve.com/cve/CVE-2024-9710.html</link><guid>https://patchthecve.com/cve/CVE-2024-9710.html</guid><pubDate>Wed, 17 Jun 2026 08:25:06 +0000</pubDate><description>HIGH 8.3: PostHog database_schema Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of PostHog. Authentication is required to exploit this vulnerability.

The specific flaw exists within the </description></item></channel></rss>