Repository navigation
Security: Icinga/icinga2
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
/v1/objects: supposedly inaccessible related objects can be accessed in filter expressionsGHSA-2hhr-ccxm-x85p published
Oct 28, 2026 by julianbrostModerate -
The default email notification scripts may allow command injection from the recipient addressGHSA-chm5-8fg3-g6fw published
Oct 28, 2026 by julianbrostModerate -
Large memory allocations on JSON-RPC connections may result in denial of serviceGHSA-wm63-p2jg-5665 published
Aug 18, 2026 by julianbrostModerate -
/v1/events filter expressions allow unrestricted access to config objects, ignoring user-specific restrictionsGHSA-v265-w3gm-99vg published
Aug 18, 2026 by julianbrostModerate -
Multiple instances of log injectionsGHSA-hhxh-8qx6-pxc3 published
Oct 28, 2026 by julianbrostModerate -
ASLR bypass via addresses from API call exception stack traceGHSA-vwj4-g6h6-65gj published
Oct 28, 2026 by julianbrostLow -
Attacker-Controlled Comparator crashes Array#sortGHSA-33vf-h78f-99p3 published
Oct 28, 2026 by julianbrostModerate -
Icinga 2 DSL Injection via Unescaped Import Template NameGHSA-jgqj-x5j9-vgcm published
Jun 29, 2026 by julianbrostHigh -
Stack overflow via deeply nested JSON objectsGHSA-wh38-wg57-5w7g published
Jun 29, 2026 by julianbrostHigh -
Improper access control for JSON-RPC update certificate messagesGHSA-vj39-ww8j-vvx5 published
Jun 29, 2026 by julianbrostCritical
Learn more about advisories related to Icinga/icinga2 in the GitHub Advisory Database