Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/openvpn-monitor@1.1.2
purl pkg:pypi/openvpn-monitor@1.1.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.9
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-vw35-c8hf-fwmq
Aliases:
CVE-2021-31604
furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client. There are no reported fixed by versions.
GHSA-5w5c-3g26-8mmc
Aliases:
CVE-2021-31606
furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients. There are no reported fixed by versions.
GHSA-4258-vcjw-wwxx
Aliases:
CVE-2021-31605
furlongm openvpn-monitor command injection furlongm openvpn-monitor through 1.1.3 allows `%0a` command injection via the OpenVPN management interface socket. This can … There are no reported fixed by versions.
PYSEC-2021-354
Aliases:
CVE-2021-31606
GHSA-5w5c-3g26-8mmc
furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients. There are no reported fixed by versions.
PYSEC-2021-352
Aliases:
CVE-2021-31604
GHSA-vw35-c8hf-fwmq
furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client. There are no reported fixed by versions.
PYSEC-2021-353
Aliases:
CVE-2021-31605
GHSA-4258-vcjw-wwxx
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server … There are no reported fixed by versions.
This package is not known to fix any advisories.