Skip to content
OpenAdvisories

Product · knadh

listmonk

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-34828 Public exploit

    listmonk: Active sessions remain valid after password reset and password change

    listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive account security changes…

    knadh listmonk github.com/knadh/listmonk Go