Skip to content
OpenAdvisories

Vendor

kanidm

1 known vulnerabilities.

Products

kanidm 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-46689

    Kanidm: Unauthenticated process abort via SCIM filter stack exhaustion

    Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endpoint with a ?filter= query string of a few thousand nested parentheses (≈ 4–12 KB) drives the recursive-descent PEG parser past the worker …

    kanidm kanidm kanidm_proto scim_proto crates.io