github.com/knadh/listmonk

Go2 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting github.com/knadh/listmonkpage 1 of 1

CVE-2025-49136CRITICALCVSS 9.0EG 9.0✓ Fixed in 5.0.2
2025-06-09
listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to version 5.0.2, the `env` and `expandenv` template functions which is enabled by default in Sprig enables capturing of env va…
CVE-2026-34828HIGHCVSS 7.1EG 7.1✓ Fixed in 1.1.1-0.20260329113754-1b5e8d38c778
2026-04-02
listmonk is a standalone, self-hosted, newsletter and mailing list manager. From version 4.1.0 to before version 6.1.0, a session management vulnerability allows previously issued authenticated sessions to remain valid after sensitive acco…

Check whether github.com/knadh/listmonk is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/knadh/listmonk CVEs against the assets you own.

Start Free Scan →