Skip to content
OpenAdvisories

Vendor

Cleo

3 known vulnerabilities.

Products

Harmony 2 cleo 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-84114

    Cleo Harmony SAML Authentication LocalUserUtil.getNativeUserByAssertions improper authentication

    A vulnerability has been found in Cleo Harmony up to 5.8.1.10. Impacted is the function LocalUserUtil.getNativeUserByAssertions of the component SAML Authentication. Such manipulation of the argument Email leads to improper authentication. The attack can be e…

    Cleo Harmony
  • Medium 5.9
    CVE-2022-42966

    Exponential ReDoS in cleo leads to denial of service

    An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method

    Cleo cleo python-cleo cleo Ubuntu PyPI