Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Security updates are always created based on the latest release.

Reporting a Vulnerability

Please report all security issues to [email protected]. Reports will be answered within 48h.

Authenticated Remote Code Execution
GHSA-fm9w-7m7v-wxqv published Mar 16, 2024 by gruberroland

High
Reflected XSS (Internet Explorer only)
GHSA-6m3q-5c84-6h6j published Jun 27, 2022 by gruberroland

Low
Unauthenticated LDAP Injection
GHSA-wxf8-9x99-6gp4 published Jun 27, 2022 by gruberroland

Moderate
Incorrect Regular Expressions
GHSA-q9pc-x84w-982x published Jun 27, 2022 by gruberroland

Moderate
Incorrect Default Permissions
GHSA-q8g5-45m4-q95p published Jun 27, 2022 by gruberroland

High
Unauthenticated Arbitrary Object Instantiation / Unauthenticated Remote Code Execution
GHSA-r387-grjx-qgvw published Jun 27, 2022 by gruberroland

High
Stored XSS and arbitrary image read vulnerability
GHSA-f2fr-cccr-583v published Apr 15, 2022 by gruberroland

Moderate

Learn more about advisories related to LDAPAccountManager/lam in the GitHub Advisory Database