Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-95j3-435g-vjcp

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-95j3-435g-vjcp

Leantime affected by Improper Neutralization of HTML Tags ### Summary HTML can be arbitrarily injected into emails from Leantime due to improper neutralization of HTML tags in users' first names. This effectively allows for the creation of phishing emails from a Leantime instance's email address.

gitlab/packagist/leantime/leantime/CVE-2025-28254

Leantime affected by Improper Neutralization of HTML Tags HTML can be arbitrarily injected into emails from Leantime due to improper neutralization of HTML tags in users' first names. This effectively allows for the creation of phishing emails from a Leantime instance's email address.

gitlab/packagist/leantime/leantime/GHSA-95j3-435g-vjcp

Duplicate This advisory duplicates another.