@stackflag.bsky.socialCVE-2026-92289 - lemonldap-ng
Versions of Lemonldap‑NG Portal from 2.23.0 up to but not including 2.23.4 can let an attacker swap an authorization code for a user’s access, ID and refresh tokens…
Too many irrelevant or confusing CVEs? Use stackflag.com
@stackflag.bsky.socialCVE-2026-92288 - lemonldap-ng
Versions of LemonLDAP::NG Portal for Debian and Ubuntu before the latest releases do not verify a client’s secret when checking OAuth2 tokens. This allows someone…
Too many irrelevant or confusing CVEs? Use stackflag.com