Security

SECURITY.md

Security Policy

Supported Versions

The latest two minors. If it's a critical threat and the latest minor is just a few weeks old, the third latest minor may also get an update.

Reporting a Vulnerability

Please head here.

Path traversal in static library file requests for unauthenticated users
GHSA-5p3f-rh28-8frw published Mar 8, 2022 by nilmerg

High
SSH resources allow arbitrary code execution for authenticated users
GHSA-v9mv-h52f-7g63 published Mar 8, 2022 by nilmerg

Moderate
Unwanted disclosure of hosts and related data, linked to decommissioned services
GHSA-qcmg-vr56-x9wf published Mar 8, 2022 by nilmerg

Moderate
Possible path traversal by use of the `doc` module
GHSA-cmgc-h4cx-3v43 published Jul 12, 2021 by nilmerg

Moderate
Custom variable protection and blacklists can be circumvented
GHSA-2xv9-886q-p7xx published Jul 12, 2021 by nilmerg

Moderate

Learn more about advisories related to Icinga/icingaweb2 in the GitHub Advisory Database