go-ldap-admin vulnerabilities

CVEs whose affected-version data names the go-ldap-admin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111347Medium· 5.9

yesterday

go-ldap-admin through 0.6.2 Hard-Coded RSA Private Key via /base/decryptpwd

go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encrypted login passwords. Unauthenticated attackers who capture encrypted passwords can decrypt them offline or via the /…

▾ Sunlitopsre · go-ldap-adminvia CVEORG