Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

lemonldap-ng-handler is a beta version, only last version is supported for now.

Reporting a Vulnerability

You can create an issue into this GitHub repository but prefer to use our main repository using Node Handler label.

Lack of URL normalization may lead to authorization bypass when URL access rules are used
GHSA-x44x-r84w-8v67 published Sep 9, 2020 by guimard

High

Learn more about advisories related to LemonLDAPNG/node-lemonldap-ng-handler in the GitHub Advisory Database