https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:50:11 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-91651 cnvd-2021-91651 https://cve.radiocsirt.org/vuln/cnvd-2021-91651 https://cve.radiocsirt.org/vuln/euvd-2026-31618 EUVD-2026-31618 https://cve.radiocsirt.org/vuln/euvd-2026-31618 https://cve.radiocsirt.org/vuln/fkie_cve-2021-41232 <p>Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there is an LDAP injection vulnerability which affects instances with LDAP authentication enabled. The provided username is not properly escaped. This issue has been patched in version 1.16.3. If users are unable to update they should disable the LDAP feature if in use.</p> <p>Thunderdome is an open source agile planning poker tool in the theme of Battling for points. In affected versions there is an LDAP injection vulnerability which affects instances with LDAP authentication enabled. The provided username is not properly escaped. This issue has been patched in version 1.16.3. If users are unable to update they should disable the LDAP feature if in use.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-41232 https://cve.radiocsirt.org/vuln/ghsa-26cm-qrc6-mfgj <p><strong>Affected:</strong> Go: github.com/stevenweathers/thunderdome-planning-poker</p> <p>### Impact LDAP injection vulnerability, only affects instances with LDAP authentication enabled.</p> <p>### Patches Patch for vulnerability released with v1.16.3.</p> <p>### Workarounds Disable LDAP feature if in use</p> <p>### References [OWASP LDAP Injection Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/LDAP_Injection_Prevention_Cheat_Sheet.html )</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [Thunderdome Github Repository](https://github.com/StevenWeathers/thunderdome-planning-poker) * Email us at [steven@weathers.me](mailto:steven@weathers.me)</p> <p><strong>Affected:</strong> Go: github.com/stevenweathers/thunderdome-planning-poker</p> <p>### Impact LDAP injection vulnerability, only affects instances with LDAP authentication enabled.</p> <p>### Patches Patch for vulnerability released with v1.16.3.</p> <p>### Workarounds Disable LDAP feature if in use</p> <p>### References [OWASP LDAP Injection Prevention Cheat Sheet](https://cheatsheetseries.owasp.org/cheatsheets/LDAP_Injection_Prevention_Cheat_Sheet.html )</p> <p>### For more information If you have any questions or comments about this advisory: * Open an issue in [Thunderdome Github Repository](https://github.com/StevenWeathers/thunderdome-planning-poker) * Email us at [steven@weathers.me](mailto:steven@weathers.me)</p> https://cve.radiocsirt.org/vuln/ghsa-26cm-qrc6-mfgj https://cve.radiocsirt.org/vuln/gsd-2021-41232 gsd-2021-41232 https://cve.radiocsirt.org/vuln/gsd-2021-41232