Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

Please e-mail all security issue findings to security@leantime.io

Stored XSS Vulnerability in Calender
GHSA-749v-fh5c-wp42 published Nov 16, 2024 by marcelfolaron

Moderate
Dumping Full DB with Backup.php
GHSA-8r84-p6fx-4m8g published Feb 6, 2024 by marcelfolaron

Moderate
XSS via To-Do title
GHSA-j5hg-w6v9-rpxp published Feb 6, 2024 by marcelfolaron

Moderate
Authenticated SQL Injection
GHSA-559g-3h98-g3fj published Oct 19, 2023 by marcelfolaron

Moderate
Open Redirect On Login Page
GHSA-pjgh-gm53-r5f9 published Nov 16, 2024 by marcelfolaron

Moderate
Cookie Does Not Contain The "secure", "HttpOnly" Attribute
GHSA-wrp4-cjx2-6jwr published Nov 12, 2024 by marcelfolaron

Low
Sensitive form field has not disabled autocomplete
GHSA-hwxr-m7m4-vhc5 published Nov 16, 2024 by marcelfolaron

Low
(CVE-2022-31129) Use of JavaScript Library with Known Vulnerability
GHSA-j8v4-vvvr-gc23 published Feb 6, 2024 by marcelfolaron

Low
Stored XSS Vulnerability via Milestone Attachments
GHSA-65wf-24mp-hjh2 published Nov 16, 2024 by marcelfolaron

Moderate
HTML injection through FIRST And LAST Name
GHSA-qrfh-cc86-vc8c published Nov 16, 2024 by marcelfolaron

Moderate

Learn more about advisories related to Leantime/leantime in the GitHub Advisory Database