nilsteampassnet/teampass (Packagist)
Advisories
42
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 3.1.3.1 or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require nilsteampassnet/teampass:^3.1.3.1Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-9wmc-988h-2mv2 TeamPass privileges issue |
High EPSS 0.47% |
< 3.1.3.1 | 3.1.3.1 |
| GHSA-7rm3-4w6j-8xx4 TeamPass mail_me operation authorization issue |
Medium EPSS 0.31% |
< 3.1.3.1 | 3.1.3.1 |
| GHSA-2697-96mv-3gfm TeamPass does not properly check whether a folder is in a user's allowed folders list |
Medium EPSS 0.34% |
< 3.1.3.1 | 3.1.3.1 |
| GHSA-524r-w8fx-hqg3 TeamPass Cross-site Scripting vulnerability |
Medium EPSS 0.62% |
< 3.0.10 | 3.0.10 |
| GHSA-2rhg-hqq9-8xjh TeamPass information exposure vulnerability |
High EPSS 0.83% |
< 3.0.10 | 3.0.10 |
| GHSA-2cv5-qvq3-6276 TeamPass vulnerable to Improper Encoding or Escaping of Output |
Medium EPSS 0.54% |
< 3.0.10 | 3.0.10 |
| GHSA-97hm-2mfr-2p97 TeamPass Code Injection vulnerability |
High EPSS 1.14% |
< 3.0.10 | 3.0.10 |
| GHSA-pwrw-g29q-3mp8 TeamPass Cross-site Scripting vulnerability |
Medium EPSS 0.54% |
< 3.0.10 | 3.0.10 |
| GHSA-qmw8-x364-xxxm Teampass Cross-site Scripting vulnerability |
Medium EPSS 0.54% |
< 3.0.9 | 3.0.9 |
| GHSA-p7xm-g427-jxfc Teampass Cross-site Scripting vulnerability |
Medium EPSS 0.52% |
< 3.0.9 | 3.0.9 |
| GHSA-g3jr-6vj4-3x82 TeamPass vulnerable to Improper Access Control |
Medium EPSS 0.38% |
< 3.0.9 | 3.0.9 |
| GHSA-j245-v2mh-5h6f TeamPass vulnerable to stored Cross-site Scripting |
Critical EPSS 0.91% |
< 3.0.9 | 3.0.9 |
| GHSA-8vm8-38pc-8xhh TeamPass vulnerable to stored Cross-site Scripting |
High EPSS 0.84% |
< 3.0.9 | 3.0.9 |
| GHSA-c6fv-3jm9-6r8f TeamPass vulnerable to stored Cross-site Scripting |
High EPSS 0.74% |
< 3.0.9 | 3.0.9 |
| GHSA-h5g9-2p35-54c7 nilsteampassnet/teampass vulnerable to cross-site scripting |
Medium EPSS 0.68% |
< 3.0.9 | 3.0.9 |
| GHSA-h6jh-cf83-qcq5 Code injection in nilsteampassnet/teampass |
High EPSS 1.65% |
< 3.0.9 | 3.0.9 |
| GHSA-prj5-2g2p-x2mw teampass vulnerable to code injection |
Medium EPSS 0.61% |
< 3.0.7 | 3.0.7 |
| GHSA-2ffp-w665-9mgx Cross Site Scripting in nilsteampassnet/teampass |
Medium EPSS 0.61% |
< 3.0.7 | 3.0.7 |
| GHSA-4h2q-84w7-4mhx nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS) |
Medium EPSS 0.36% |
< 3.0.3 | 3.0.3 |
| GHSA-ppxm-q2h4-v7mm Teampass SQL Injection vulnerability |
High EPSS 8.35% |
< 3.0.0.22 | 3.0.0.22 |
| GHSA-86jq-pwgx-6vrq Improper Authorization in nilsteampassnet/teampass |
Medium EPSS 0.52% |
< 3.0.0.23 | 3.0.0.23 |
| GHSA-x36g-4629-xp9v TeamPass External Control of File Name or Path vulnerability |
High EPSS 0.82% |
< 3.0.0.23 | 3.0.0.23 |
| GHSA-rpmr-fwh5-24fm TeamPass Cross-site Scripting (XSS) vulnerability |
Medium EPSS 0.69% |
<= 2.1.27.36 | No fix yet |
| GHSA-6jf9-8m34-96w5 TeamPass PHP arbitrary file include vulnerability |
High EPSS 2.57% |
<= 2.1.27.36 | No fix yet |
| GHSA-83h6-22cp-f22w TeamPass files are available without authentication |
High EPSS 8.55% |
No fix yet | |
| GHSA-v969-5v7f-pmg2 TeamPass Stored Cross-site Scripting |
Medium EPSS 1.03% |
<= 2.1.27.36 | No fix yet |
| GHSA-pqx8-q35p-pgcv TeamPass Stored Cross-site Scripting |
Medium EPSS 0.63% |
<= 2.1.27.36 | No fix yet |
| GHSA-qx37-225j-qr89 TeamPass Stored Cross-site Scripting |
Medium EPSS 0.63% |
<= 2.1.27.36 | No fix yet |
| GHSA-m3pp-jcpm-2vr9 TeamPass Cross-site Scripting (XSS) |
Medium EPSS 0.76% |
<= 2.1.27.35 | No fix yet |
| GHSA-r64j-5w3w-fp49 TeamPass vulnerable to SQL Injection |
Critical EPSS 3.39% |
< 2.1.25 | 2.1.25 |
| GHSA-48q3-m4hf-56c9 TeamPass vulnerable to Cross-site Scripting |
Medium EPSS 1.83% |
< 2.1.25 | 2.1.25 |
| GHSA-cm26-gp8j-w6xf TeamPass SQL injection in users.queries.php |
Critical EPSS 1.04% |
< 2.1.27.5 | 2.1.27.5 |
| GHSA-28pv-2j2h-fmhc TeamPass Cross-Site Scripting (XSS) |
Medium EPSS 0.95% |
< 2.1.27.9 | 2.1.27.9 |
| GHSA-rm3q-qfrm-frrv TeamPass arbitrary file upload vulnerability |
High EPSS 3.50% |
< 2.1.27.9 | 2.1.27.9 |
| GHSA-r68m-4v39-cf43 TeamPass stored cross-site scripting (XSS) vulnerability |
Medium EPSS 0.95% |
< 2.1.27.9 | 2.1.27.9 |
| GHSA-xvjf-394g-phrr TeamPass Improper Privilege Management |
Medium EPSS 0.92% |
< 2.1.27.9 | 2.1.27.9 |
| GHSA-7ghm-6p42-h226 TeamPass Improper Privilege Management |
High EPSS 1.06% |
< 2.1.27.9 | 2.1.27.9 |
| GHSA-5qr3-4839-88gf TeamPass Improper Privilege Management |
Medium EPSS 0.92% |
< 2.1.27.9 | 2.1.27.9 |
| GHSA-q9qr-h33g-fw3j TeamPass Storing Passwords in a Recoverable Format vulnerability |
Critical EPSS 1.72% |
<= 2.1.27 | No fix yet |
| GHSA-m2wv-m5pf-284r Cross-site Scripting in teampass |
Medium EPSS 1.09% |
<= 2.1.26 | No fix yet |
| GHSA-gmr7-m73x-6c9q Missing Authorization in TeamPass |
High EPSS 1.14% |
<= 2.1.27.36 | No fix yet |
| GHSA-fv48-hjhp-94c7 Incorrect Authorization in TeamPass |
High EPSS 1.80% |
<= 2.1.27.36 | No fix yet |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor