CVE-2025-24025: Coollabs Coolify

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.380, the tags page allows users to search for tags. If the search does not return any results, the query gets reflected on the error modal, which leads to cross-site scripting. Version 4.0.0-beta.380 fixes the issue.

Affected products

• Coollabs Coolify: before 4.0.0 (fixed in 4.0.0); version 4.0.0 only

Published 2025-01-24. Last modified 2026-06-17.