https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:32:57.148393+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-91651 cnvd-2021-91651 2026-10-02T20:32:57.233800+00:00 cnvd-2021-91651 https://cve.radiocsirt.org/vuln/euvd-2026-31618 EUVD-2026-31618 2026-10-02T20:32:57.233844+00:00 EUVD-2026-31618 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41232 fkie_cve-2021-41232 2026-10-02T20:32:57.233859+00:00

Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there is an LDAP injection vulnerability which affects instances with LDAP authentication enabled. The provided username is not properly escaped. This issue has been patched in version 1.16.3. If users are unable to update they should disable the LDAP feature if in use.

 https://cve.radiocsirt.org/vuln/ghsa-26cm-qrc6-mfgj GHSA-26cm-qrc6-mfgj — Improper Neutralization of Special Elements used in an LDAP Query in stevenweathers/thunderdome-planning-poker 2026-10-02T20:32:57.233893+00:00

Affected: Go: github.com/stevenweathers/thunderdome-planning-poker

### Impact LDAP injection vulnerability, only affects instances with LDAP authentication enabled.

### Patches Patch for vulnerability released with v1.16.3.

### Workarounds Disable LDAP feature if in use

### References [OWASP LDAP Injection Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/LDAP_Injection_Prevention_Cheat_Sheet.html )

### For more information If you have any questions or comments about this advisory: * Open an issue in [Thunderdome Github Repository](https://github.com/StevenWeathers/thunderdome-planning-poker) * Email us at [steven@weathers.me](mailto:steven@weathers.me)

 https://cve.radiocsirt.org/vuln/gsd-2021-41232 gsd-2021-41232 2026-10-02T20:32:57.233925+00:00 gsd-2021-41232