Retool Vulnerabilities

3 vulnerabilities related to Retool

PoC2026-05-09retool-postmessage-xss: Retool Self-Hosted - postMessage XSS via Custom Component Collections
PoC2025-08-01retool-dom-xss: Retool <3.82.0 Edge OAuth Authorize - DOM Based XSS
PoC2025-08-01retool-svg-xss: Retool < 3.88 - SVG Cross-Site Scripting