CVE-2021-3649: Chatwoot

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

chatwoot is vulnerable to Inefficient Regular Expression Complexity

Affected products

• Chatwoot Chatwoot: before 1.18.0 (fixed in 1.18.0)

Published 2021-07-16. Last modified 2026-06-17.