Start for Free
pypi

lemur

View on pypi registry
14 Total advisories
14 Vulnerabilities
0 Malware

Vulnerabilities

CRITICAL 9.9
PyPI

CVE-2026-55166

Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise
CRITICAL 9.9
PyPI

CVE-2026-55166

Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise
MEDIUM 6.3
PyPI

CVE-2026-55163

Lemur Privilege Escalation: Non-admin role members can rewrite role membership via PUT /api/1/roles/<id>
MEDIUM 4.8
PyPI

CVE-2026-55165

Lemur: JWT verifier honors attacker-supplied alg, enabling ATO
MEDIUM 4.9
PyPI

CVE-2026-55164

Lemur user-update path stores plaintext passwords
MEDIUM 6.3
PyPI

CVE-2026-55162

Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF
HIGH 8.8
PyPI

CVE-2026-48508

Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission
UNKNOWN
PyPI

CVE-2015-7764

CVE-2015-7764
HIGH 8.1
PyPI

CVE-2026-44304

Lemur: LDAP Filter Injection enables post-authentication privilege escalation
MEDIUM 6.8
PyPI

CVE-2026-44305

Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled
HIGH 7.5
PyPI

CVE-2023-30797

Lemur subject to insecure random generation
HIGH 7.5
PyPI

CVE-2015-7764

Lemur uses static IV per key
HIGH 7.5
PyPI

GHSA-r4xg-4wrv-w72h

Duplicate Advisory: Lemur subject to insecure random generation
UNKNOWN
PyPI

CVE-2023-30797

CVE-2023-30797

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes