Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-46011
6.5
MEDIUMCVSS v3
Published
June 4, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.
knadh/listmonk
GitHubHigh performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.
GitHubHigh performance, self-hosted, newsletter and mailing list manager with a modern dashboard. Single binary app.>= 2.4.0, < 5.0.0NVD