Security
فارسی
All products

leantime/leantime

Composer · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsCVE-2026-85990 · GHSA-54MM-6729-R5WP leantime/leantime Composer High Fix reported
Leantime has HTML injection through firstname and lastname fieldsGHSA-QRFH-CC86-VC8C leantime/leantime Composer Medium Fix reported
Leantime affected by Improper Neutralization of HTML TagsCVE-2025-28254 · GHSA-95J3-435G-VJCP leantime/leantime Composer Medium Fix reported
Leantime allows Cross-Site Scripting (XSS)GHSA-F679-254H-QHVJ leantime/leantime Composer Low Fix reported
Leantime has Missing Authorization Check for Host ParameterGHSA-3HFJ-QCVJ-4HX8 leantime/leantime Composer Low Fix reported
Leantime allows Stored Cross-Site Scripting (XSS)GHSA-C39W-3PJX-QC7M leantime/leantime Composer High Fix reported
Leantime allows Cross Site Scripting (XSS) and SQL Injection (SQLi)GHSA-V4Q9-437P-MHPG leantime/leantime Composer High Fix reported
Leantime allows Cross-Site Request Forgery (CSRF)GHSA-92XH-6X7V-4RMQ leantime/leantime Composer Medium Fix reported
Leantime has Host Header Injection Vulnerability GHSA-99R5-84GR-59F6 leantime/leantime Composer Medium Fix reported
Leantime allows Stored Cross-Site Scripting (XSS)GHSA-63CR-XG3F-8JVR leantime/leantime Composer Medium No fix reported
Leantime allows Stored Cross-Site Scripting (XSS)GHSA-MG4C-884J-PCQ9 leantime/leantime Composer Medium Fix reported
Leantime has Insufficiently Protected CredentialsGHSA-H6W8-27PH-C385 leantime/leantime Composer Medium Fix reported
Leantime allows Refelected Cross-Site Scripting (XSS)GHSA-52XF-H226-PFGX leantime/leantime Composer Medium Fix reported