Petpooja vulnerabilities
Every vulnerability this feed holds for Petpooja, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
6 vulnerabilities tracked.
- 8.8 Attendo (formerly Petpooja Payroll) Admin Android application version 3.0.13 and earlier contains a hard-coded credentials vulnerability…
- 8.7 Munshi (by Petpooja) before 2026-06-30 contained a payment bypass vulnerability in its subscription payment webhook at POST…
- 7.2 Munshi (by Petpooja) before 2026-07-07 contained a missing authorization vulnerability in its company deletion workflow at DELETE…
- 7.1 Munshi (by Petpooja) before 2026-06-17 contained a broken object level authorization vulnerability that allows authenticated attackers to…
- 7.1 Munshi (by Petpooja) before 2026-07-28 contained a broken object level authorization vulnerability that allows authenticated sub-users to…
- 5.1 Munshi (by Petpooja) before 2026-07-13 contained a stored cross-site scripting vulnerability that allows authenticated users to inject…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Petpooja is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Red Hat n/a MediaTek, Inc. Linux Apache Software Foundation Gitea WAVLINK Huawei Eclipse Foundation Apple WSO2 Dell PostgreSQL Control Web Panel Hewlett Packard Enterprise (HPE) nodejs Netpbm aws zephyrproject MONGODB Cisco Unknown Oray