Skip to content
OpenAdvisories

Vendor

knadh

6 known vulnerabilities.

Products

listmonk 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-34828 Public exploit

    listmonk: Active sessions remain valid after password reset and password change

    listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes…

    knadh listmonk github.com/knadh/listmonk Go
  • Critical 9.1
    CVE-2025-49136 Public exploit

    listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user

    listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to version 5.0.2, the `env` and `expandenv` template functions which is enabled by default in Sprig enables capturing of env variables on host. Whi…

    knadh listmonk github.com/knadh/listmonk Go