lemonldap-ng

Direct Vulnerabilities

Known vulnerabilities in the lemonldap-ng package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L CVE-2026-19349	<2.16.1+ds-deb12u9
M Open Redirect	<2.16.1+ds-deb12u9
L OS Command Injection	<2.16.1+ds-deb12u7
L Cross-site Scripting (XSS)	<2.16.1+ds-deb12u6
L CVE-2024-52947	<2.16.1+ds-deb12u4
L CVE-2024-52946	<2.16.1+ds-deb12u4
M Cross-site Scripting (XSS)	<2.16.1+ds-deb12u3
M Server-Side Request Forgery (SSRF)	<2.16.1+ds-deb12u2
C Improper Authentication	<2.16.1+ds-1
M Insufficient Session Expiration	<2.0.15+ds-1
C Improper Authentication	<2.0.14+ds-1
H Improper Restriction of Excessive Authentication Attempts	<2.0.11+ds-4
L CVE-2021-35473	<2.0.11+ds-4
C Direct Request ('Forced Browsing')	<2.0.9+ds-1
H Improper Certificate Validation	<2.0.9+ds-1
C CVE-2019-19791	<2.0.7+ds-1
C Incorrect Authorization	<2.0.6+ds-1
H XML External Entity (XXE) Injection	<2.0.0+ds-1
C Insufficiently Protected Credentials	<2.0.2+ds-7+deb10u1
H Access Restriction Bypass	<1.2.2-3