Security

Report a vulnerability

SECURITY.md

Security Policy

Reporting a Vulnerability

Please e-mail all security issue findings to [email protected]

Dumping Full DB with Backup.php
GHSA-8r84-p6fx-4m8g published Feb 6, 2024 by marcelfolaron

Moderate
XSS via To-Do title
GHSA-j5hg-w6v9-rpxp published Feb 6, 2024 by marcelfolaron

Moderate
Authenticated SQL Injection
GHSA-559g-3h98-g3fj published Oct 19, 2023 by marcelfolaron

Moderate
Cookie Does Not Contain The "secure", "HttpOnly" Attribute
GHSA-wrp4-cjx2-6jwr published Nov 12, 2024 by marcelfolaron

Low
(CVE-2022-31129) Use of JavaScript Library with Known Vulnerability
GHSA-j8v4-vvvr-gc23 published Feb 6, 2024 by marcelfolaron

Low
Stored XSS Vulnerability
GHSA-359m-fp6q-65r7 published May 27, 2023 by marcelfolaron

Moderate
Authenticated Blind SQL Injection
GHSA-ww6x-rhvp-55hp published Mar 27, 2020 by marcelfolaron

High

Learn more about advisories related to Leantime/leantime in the GitHub Advisory Database