lemur vulnerabilities (PyPI)
18 vulnerabilities.
-
lemurPyPI Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it 7.3 High -
lemurPyPI Lemur: Missing authorization check on POST /certificates/<id>/export for plugins with requires_key = False 4.3 Medium -
lemurPyPI Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority 6.5 Medium -
lemurPyPI Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs 7.4 High -
lemurPyPI Lemur: Incomplete fix for CVE-2026-55166 -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist 7.7 High -
lemurPyPI Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the destinations API 7.7 High -
lemurPyPI Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates 8.1 High -
lemurPyPI Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for CVE-2026-55162) 6.3 Medium -
lemurPyPI Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR 9.9 Critical -
lemurPyPI Lemur : JWT verifier trusts attacker-supplied alg from token header — defense-in-depth gap; chain-dependent ATO with secret disclosure 4.8 Medium -
lemurPyPI Lemur: Plaintext password storage in Lemur user-update path 4.9 Medium -
lemurPyPI Lemur: Privilege escalation via PUT /api/1/roles/<id> — non-admin role members can rewrite role membership 6.3 Medium -
lemurPyPI Lemur: Post-authentication SSRF via certificate verification - attacker-controlled CRL and OCSP URLs in uploaded certificates 6.3 Medium -
lemurPyPI Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission 8.8 High -
lemurPyPI Lemur: LDAP Filter Injection enables post-authentication privilege escalation 8.1 High -
lemurPyPI Lemur: LDAP TLS certificate verification globally disabled enables credential interception 6.8 Medium -
lemurPyPI Insecure Random Generation in Netflix Lemur 7.5 High -
lemurPyPI Lemur uses static IV per key 7.5 High