github.com/knadh/listmonk
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials | github.com/knadh/listmonk | Go | Medium | Fix reported | |
| listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user | github.com/knadh/listmonk | Go | Critical | Fix reported | |
| listmonk: CSRF to XSS Chain can Lead to Admin Account Takeover | github.com/knadh/listmonk | Go | High | No fix reported | |
| listmonk's active sessions remain valid after password reset and password change | github.com/knadh/listmonk | Go | High | Fix reported | |
| listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover | github.com/knadh/listmonk | Go | Medium | Fix reported |