Login Request a demo
LE
Product
lemonldap-ng
by lemonldap-ng · last CVE Jun 21, 2026
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 8High 5Medium 4Low 0
Severity
All severities18Critical8High5Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lemonldap-ng to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-48933
6.1
0%
Oct 9
A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.19.3 allows remote attackers to inject arbitrary web script or HTML into the login page via a username if…
Affected: before 2.19.3
CVE-2022-37186
5.9
1%
Apr 16
In LemonLDAP::NG before 2.0.15
Affected: before 2.0.15
CVE-2026-12804
4.3
0%
Jun 21
lemonldap-ng SAML Common Domain Cookie Endpoint CDC.pm redirect
Affected: 2.0; 2.1; 2.2; 2.3; 2.4; 2.5; +18 more
CVE-2023-44469
4.3
1%
Sep 29
A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send GET requests to arbitrary URLs…
Affected: before 2.17.1
Showing 4