billz/raspap-webgui Security Advisories for 3.1.3 (3)
-
[HIGH] RaspAP raspap-webgui contains an OS Command Injection vulnerability
PKSA-vf1y-yyyt-3znd CVE-2026-24788 GHSA-4wwf-f7w3-94f5
Affected version: <3.3.6
Reported by:
GitHub -
[HIGH] raspap-webgui has a Directory Traversal vulnerability
PKSA-39wq-fxs7-zymy CVE-2025-44163 GHSA-277f-37gw-9gmq
Affected version: <3.3.6
Reported by:
GitHub -
[CRITICAL] RaspAP allows an attacker to escalate privileges
PKSA-fnmc-s4nq-ydpw CVE-2024-41637 GHSA-q623-2j2j-23jj
Affected version: <=3.1.4
Reported by:
GitHub