Skip to content
OpenAdvisories

Package · Go

github.com/knadh/listmonk

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-49136 Public exploit

    listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user

    listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to version 5.0.2, the `env` and `expandenv` template functions which is enabled by default in Sprig enables capturing of env variables on host. Whi…

    knadh listmonk github.com/knadh/listmonk Go