Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/librenms/librenms@201609
purl pkg:composer/librenms/librenms@201609
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (24)
Vulnerability Summary Aliases
VCID-8333-p936-4yen Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0. CVE-2023-4978
GHSA-qjpw-rg56-jh8v
VCID-8xsz-9mtq-w7ct Missing Authorization in librenms/librenms CVE-2022-0588
GHSA-254q-rqmw-vx45
VCID-8ytn-qf7f-yfbf SQL Injection in GitHub repository librenms/librenms prior to 23.10.0. CVE-2023-5591
GHSA-mr6h-7x2m-rgmq
VCID-98wd-pvht-nqfu Cross site scripting in LibreNMS CVE-2022-0772
GHSA-vhm6-gw82-6f8j
VCID-cntm-etf9-kkbv librenms is a community-based GPL-licensed network monitoring system. A stored Cross-Site Scripting (XSS) vulnerability exists in LibreNMS (<= 25.6.0) in the Alert Template creation feature. This allows a user with the admin role to inject malicious JavaScript, which will be executed when the template is rendered, potentially compromising other admin accounts. This vulnerability is fixed in 25.8.0. CVE-2025-55296
GHSA-vxq6-8cwm-wj99
VCID-dku9-fked-fueu LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. In affected versions the login method has no rate limit. An attacker may be able to leverage this vulnerability to gain access to user accounts. This issue has been addressed in version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. CVE-2023-46745
GHSA-rq42-58qf-v3qx
VCID-ek4h-m8w9-t7bp Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.0. CVE-2023-4981
GHSA-5jjm-qp48-qp86
VCID-gzvy-qsmz-a7ca Cross-site Scripting (XSS) - DOM in GitHub repository librenms/librenms prior to 23.9.1. CVE-2023-5060
GHSA-2q8c-gqf4-mg3v
VCID-ja3k-pqg6-cuct CVE-2021-43324
GHSA-46rx-6jg9-4fh8
VCID-k3tp-p2ay-5bf3 Cross-site Scripting in librenms CVE-2022-0575
GHSA-hxmr-5gv9-6p8v
VCID-kujx-pwg2-9kfx CVE-2023-48294
GHSA-fpq5-4vwm-78x4
VCID-n9g7-5ahp-9qh6 Cross-site Scripting in LibreNMS CVE-2021-44279
GHSA-5vr6-hm68-5j9p
VCID-r7fv-dr67-j7ht Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.9.0. CVE-2023-4979
GHSA-jp3c-g46v-jg2c
VCID-s58c-1ss7-jbh1 LibreNMS stored Cross-site Scripting via Schedule Maintenance `Title` parameter CVE-2022-3231
GHSA-3jh2-wmv7-m932
VCID-sm1m-7ca9-vfb4 Improper Authorization in librenms CVE-2022-0587
GHSA-ppfm-rj6p-38q6
VCID-srqm-zv16-eubv Code Injection in GitHub repository librenms/librenms prior to 23.9.0. CVE-2023-4977
GHSA-57m2-mpc7-gwgx
VCID-t5mg-4z98-57au Cross-site Scripting in LibreNMS CVE-2021-44277
GHSA-4gwh-2pqx-f5cc
VCID-tube-fx1x-cka6 Cross-site Scripting (XSS) - Reflected in GitHub repository librenms/librenms prior to 23.8.0. CVE-2023-4347
GHSA-m6pf-cm3f-7876
VCID-vhry-3hqm-bbaz Improper Access Control in librenms CVE-2022-0580
GHSA-33wf-4crm-2322
VCID-vrsm-hwju-hbhk Path traversal in librenms/librenms CVE-2021-44278
GHSA-7289-chwj-7h86
VCID-w5bg-g2j5-7qh2 Cross-site Scripting (XSS) - Generic in GitHub repository librenms/librenms prior to 23.9.0. CVE-2023-4980
GHSA-qxrq-376q-p39h
VCID-wq47-3ncm-7kfn Cross-site Scripting (XSS) - Stored in GitHub repository librenms/librenms prior to 23.9.0. CVE-2023-4982
GHSA-m6jj-fgmh-3p8r
VCID-y22w-mxrw-sbh1 Cross-site Scripting in librenms CVE-2022-0576
GHSA-rp34-85x3-3764
VCID-zz5d-y7ak-zbdm LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operating systems. Affected versions are subject to a cross site scripting (XSS) vulnerability in the device group popups. This issue has been addressed in commit `faf66035ea` which has been included in release version 23.11.0. Users are advised to upgrade. There are no known workarounds for this vulnerability. CVE-2023-48295
GHSA-8phr-637g-pxrg

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T20:09:59.449040+00:00 GitLab Importer Fixing VCID-cntm-etf9-kkbv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2025-55296.yml 38.6.0
2026-06-12T19:11:31.374827+00:00 GitLab Importer Fixing VCID-kujx-pwg2-9kfx https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-48294.yml 38.6.0
2026-06-12T19:11:30.456537+00:00 GitLab Importer Fixing VCID-dku9-fked-fueu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-46745.yml 38.6.0
2026-06-12T19:11:29.816189+00:00 GitLab Importer Fixing VCID-zz5d-y7ak-zbdm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-48295.yml 38.6.0
2026-06-12T19:08:28.589062+00:00 GitLab Importer Fixing VCID-8ytn-qf7f-yfbf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-5591.yml 38.6.0
2026-06-12T19:06:08.644364+00:00 GitLab Importer Fixing VCID-gzvy-qsmz-a7ca https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-5060.yml 38.6.0
2026-06-12T19:06:05.686198+00:00 GitLab Importer Fixing VCID-r7fv-dr67-j7ht https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-4979.yml 38.6.0
2026-06-12T19:06:01.746753+00:00 GitLab Importer Fixing VCID-srqm-zv16-eubv https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-4977.yml 38.6.0
2026-06-12T19:05:56.419667+00:00 GitLab Importer Fixing VCID-8333-p936-4yen https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-4978.yml 38.6.0
2026-06-12T19:05:55.798706+00:00 GitLab Importer Fixing VCID-w5bg-g2j5-7qh2 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-4980.yml 38.6.0
2026-06-12T19:05:51.228963+00:00 GitLab Importer Fixing VCID-wq47-3ncm-7kfn https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-4982.yml 38.6.0
2026-06-12T19:05:49.839612+00:00 GitLab Importer Fixing VCID-ek4h-m8w9-t7bp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-4981.yml 38.6.0
2026-06-12T19:03:17.610375+00:00 GitLab Importer Fixing VCID-tube-fx1x-cka6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2023-4347.yml 38.6.0
2026-06-12T18:33:26.836538+00:00 GitLab Importer Fixing VCID-s58c-1ss7-jbh1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2022-3231.yml 38.6.0
2026-06-12T18:00:49.847938+00:00 GitLab Importer Fixing VCID-98wd-pvht-nqfu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2022-0772.yml 38.6.0
2026-06-12T18:00:01.704929+00:00 GitLab Importer Fixing VCID-8xsz-9mtq-w7ct https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2022-0588.yml 38.6.0
2026-06-12T17:59:52.017823+00:00 GitLab Importer Fixing VCID-sm1m-7ca9-vfb4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2022-0587.yml 38.6.0
2026-06-12T17:59:49.771330+00:00 GitLab Importer Fixing VCID-vhry-3hqm-bbaz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2022-0580.yml 38.6.0
2026-06-12T17:59:49.273592+00:00 GitLab Importer Fixing VCID-k3tp-p2ay-5bf3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2022-0575.yml 38.6.0
2026-06-12T17:59:48.766903+00:00 GitLab Importer Fixing VCID-y22w-mxrw-sbh1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2022-0576.yml 38.6.0
2026-06-12T17:53:15.635090+00:00 GitLab Importer Fixing VCID-vrsm-hwju-hbhk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2021-44278.yml 38.6.0
2026-06-12T17:52:58.736877+00:00 GitLab Importer Fixing VCID-t5mg-4z98-57au https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2021-44277.yml 38.6.0
2026-06-12T17:52:54.908692+00:00 GitLab Importer Fixing VCID-n9g7-5ahp-9qh6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2021-44279.yml 38.6.0
2026-06-12T17:50:19.294355+00:00 GitLab Importer Fixing VCID-ja3k-pqg6-cuct https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/librenms/librenms/CVE-2021-43324.yml 38.6.0