CVE catalog

CVE-2026-92288

lemonldap-ng: CVE-2026-92288

Severity: Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Published: Sep 25, 2026, 12:10:24 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.44% · Oct 25, 2026

Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCredentials does not verify the client secret of a public Relying Party. checkEndPointAuthenticationCredentials() skips the secret comparison for a Relying Party marked public and still returns the authentication method deduced from the request, client_secret_basic or client_secret_post. introspection() rejects a caller only when that method is missing or none, so a request carrying a public client_id and an arbitrary or empty secret passes the endpoint's authentication check. An attacker who holds an access token and knows the client_id of any public Relying Party can confirm the token is active and read its metadata, including scope, audience, expiry and the sub claim. The sub claim is computed with the calling Relying Party's user identifier attribute, so an attacker can translate a user identifier from one Relying Party to another, defeating per-client and pseudonymous identifiers.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	lemonldap-ng	sid	`2.23.4+ds+~0.5.5-1`	fixed
Debian	lemonldap-ng	forky	`2.23.4+ds+~0.5.5-1`	fixed
Debian	lemonldap-ng	trixie	`2.21.2+ds-1+deb13u3`	vulnerable
Debian	lemonldap-ng	trixie-security	`2.21.2+ds-1+deb13u4`	fixed
Debian	lemonldap-ng	bookworm	`2.16.1+ds-deb12u8`	not affected
Debian	lemonldap-ng	bookworm-security	`2.16.1+ds-deb12u10`	not affected

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	lemonldap-ng	source	sid	`2.23.4+ds-1`	not yet assigned	Not reported	Not reported
Debian	lemonldap-ng	source	forky	`2.23.4+ds-1`	not yet assigned	Not reported	Not reported
Debian	lemonldap-ng	source	trixie	`2.21.2+ds-1+deb13u4`	not yet assigned	Not reported	Not reported
Debian	lemonldap-ng	source	bookworm	`Not affected`	unimportant	Not reported	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[lemonldap-ng]Affected
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[lemonldap-ng-doc]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[lemonldap-ng-fastcgi-server]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[lemonldap-ng-handler]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[lemonldap-ng-uwsgi-app]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[liblemonldap-ng-common-perl]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[liblemonldap-ng-handler-perl]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[liblemonldap-ng-manager-perl]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[liblemonldap-ng-portal-perl]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
[liblemonldap-ng-ssoaas-apache-client-perl]Affected
Source package: [lemonldap-ng]
Details (7)
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u2 · all · trixie
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.23.2+ds-1~bpo13+1 · all · trixie-backports
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security · Historical version
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u3 · all · trixie-security
  Affected · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13
- 2.21.2+ds-1+deb13u4 · all · trixie-security
  Fixed · Fixed: 2.21.2+ds-1+deb13u4
  dsa · lemonldap-ng · debian · 13

[Debian 12 (Bookworm)]

[lemonldap-ng]Not affected
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[lemonldap-ng-doc]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[lemonldap-ng-fastcgi-server]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[lemonldap-ng-handler]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[lemonldap-ng-uwsgi-app]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[liblemonldap-ng-common-perl]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[liblemonldap-ng-handler-perl]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[liblemonldap-ng-manager-perl]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[liblemonldap-ng-portal-perl]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
[liblemonldap-ng-ssoaas-apache-client-perl]Not affected
Source package: [lemonldap-ng]
Details (6)
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u8 · all · bookworm
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.21.3+ds-1~bpo12+1 · all · bookworm-backports
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm
- 2.16.1+ds-deb12u9 · all · bookworm-security
  Not affected
  dsa · lemonldap-ng · debian · bookworm

Observed: Oct 27, 2026, 5:02:15 AM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]