sogo

Direct Vulnerabilities

Known vulnerabilities in the sogo package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Weak Password Recovery Mechanism for Forgotten Password	<5.12.1-3+deb13u3
L TEMP-0000000-5E8928	<5.12.1-3+deb13u3
L SQL Injection	<5.8.0-2+deb12u3
L SQL Injection	<5.8.0-2+deb12u3
L CVE-2026-39179	<5.8.0-2+deb12u3
L CVE-2026-39178	<5.8.0-2+deb12u3
L Use of Single-factor Authentication	<5.8.0-2+deb12u3
M Cross-site Scripting (XSS)	<5.8.0-2+deb12u3
L CVE-2025-63499	<5.8.0-2+deb12u1
L CVE-2025-63498	<5.8.0-2+deb12u1
L CVE-2024-34462	<5.8.0-2+deb12u1
L CVE-2024-24510	<5.8.0-2+deb12u1
M Cross-site Scripting (XSS)	<5.8.0-2+deb12u1
H Improper Verification of Cryptographic Signature	<5.1.1-1
M Cross-site Scripting (XSS)	<4.3.2-1
H SQL Injection	<5.8.0-2+deb12u3
L CVE-2026-8496	<5.8.0-2+deb12u3
M Cross-site Scripting (XSS)	<5.12.1-3+deb13u2
M Improper Enforcement of Message or Data Structure	<5.8.0-1
M Improper Enforcement of Message or Data Structure	<5.8.0-1
M Cross-site Scripting (XSS)	<3.2.4-0.2
M Information Exposure	<3.2.4-0.2
M Incomplete Blacklist	<3.2.4-0.2
M Resource Management Errors	<3.2.4-0.2
H Cross-site Request Forgery (CSRF)	<3.2.4-0.2
M Cross-site Scripting (XSS)	<2.2.5-1