Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: lirantal Clear all filters
TI-2025-04255 CVE-2025-4759 · GHSA-7cfr-5cjf-32p4

Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect…

Priority HIGH 70

Versions of the package lockfile-lint-api before 5.9.2 are vulnerable to Incorrect Behavior Order: Early Validation via the resolved attribute of the package URL validation which can be bypassed by extending the package…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00439 Published 2025-05-16 Fixed in 5.9.2 CWE-179
TI-2023-00044 CVE-2023-0048 · GHSA-j489-chr2-q5vp

Code Injection in lirantal/daloradius

Priority HIGH 73

Code Injection in GitHub repository lirantal/daloradius prior to master-branch.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.30143 Published 2023-01-04 Fixed in master-branch CWE-94
TI-2022-03999 CVE-2022-4366 · GHSA-4gv4-7phc-2jw7

Missing Authorization in lirantal/daloradius

Priority HIGH 66

Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00748 Published 2022-12-08 Fixed in master branch CWE-862
TI-2022-07535 CVE-2022-23475

dalorRadius full account take over

Priority HIGH 73

daloRADIUS is an open source RADIUS web management application.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00485 Published 2022-12-06 No fix listed CWE-352