Cosmos-Server
v0.24.0☁️ The Most Secure and Easy Selfhosted Home Server. Take control of your data and privacy without sacrificing security and stability (Authentication, anti-DDOS, anti-bot)
- Maintenance
- ActiveBased on the last push: commit history is not collected yet
- License
- OtherUnknown
- Security
- 4 advisories1 high, 2 medium, 1 low
- Supported versions
- No scheduleendoflife.date does not track this project
6.2k stars · 252 forks · 213 open issues · last release 2 days ago · data checked 1 hour ago
Security advisories
All advisories on GitHubThe 4 most recent advisories published by the maintainers: 1 high, 2 medium, 1 low. Check the patched version against the one you run.
- mediumCVE-2026-49447Jul 28, 2026Constellation public-devices endpoint accepts arbitrary bearer tokens
- Affected
- 0.22.18
- Patched in
- 0.22.19
- mediumCVE-2026-49446Jul 28, 2026Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server
- Affected
- <= 0.22.18
- Patched in
- 0.22.19
- lowCVE-2025-23214Jan 20, 2025[FIXED] User base checking vulnerability
- Affected
- < 0.17.7
- Patched in
- 0.17.7
- highCVE-2023-49091Nov 28, 2023[FIXED] Jwttoken never expire after changed the password and logged out
- Affected
- < 0.13.0
- Patched in
- 0.13.1