Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-3309
8.1
HIGHCVSS v3
Published
January 26, 2021
CVSS v2
6.8 MEDIUM
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,
wekan/wekan
GitHubThe Open Source kanban, built with Meteor. GitHub issues/PRs are only for FLOSS Developers, not for support, support is at https://wekan.fi/commercial-support/ . New English strings for new features at imports/i18n/data/en.i18n.json . Non-English translations at https://app.transifex.com/wekan/wekan only.
GitHubThe Open Source kanban, built with Meteor. GitHub issues/PRs are only for FLOSS Developers, not for support, support is at https://wekan.fi/commercial-support/ . New English strings for new features at imports/i18n/data/en.i18n.json . Non-English translations at https://app.transifex.com/wekan/wekan only.< 4.87NVD
Docker Hub